Sitel CAP/PRX 信任管理问题漏洞

Sitel CAP/PRX is an operating system from Sitel France. It is used for central processing units that have a 180MHz ARM9 architecture. A trust management issue vulnerability exists in SITEL CAP/PRX firmware version 5.2.01, which arises from the use of hard-coded passwords, and can be exploited by ...

Dell EMC NetWorker 信任管理问题漏洞

DELL EMC NetWorker is a set of unified backup and recovery software from Dell DELL, USA. The software provides backup and recovery, deduplication, backup reporting, etc. Dell EMC NetWorker has security vulnerabilities that can be exploited by attackers to exploit multiple vulnerabilities in Dell...

Mozilla 信任管理问题漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla is vulnerable to a trust management issue vulnerability that stems from a flaw in the embedded certificate code that could allow a website to install a root certificate on a device without user...

SonicWall Email Security Appliance 信任管理问题漏洞

Sonicwall SonicWall Email Security Appliance is an email security appliance from SonicWall USA. A vulnerability with trust management issues exists in the SonicWall Email Security Virtual Appliance prior to version 10.0.9. The vulnerability stems from the program containing a default username and...

Prosodical Thoughts Prosody 信任管理问题漏洞

Prosodical Thoughts Prosody is a Prosodical Thoughts open source application . A modern XMPP communication server. A trust management issue vulnerability exists in Prosody prior to version 0.11.9. The vulnerability stems from the program not properly validating remote server certificates...

Securing a new world of hybrid work: What to know and what to do

The cybersecurity landscape has fundamentally changed, as evidenced by large-scale, complex attacks like Nobelium, Hafnium, and more recently last week’s Colonial Pipeline attack, which signals that human-operated ransomware is on the rise. Hackers launch an average of 50 million password attacks...

Securing a new world of hybrid work: What to know and what to do

The cybersecurity landscape has fundamentally changed, as evidenced by large-scale, complex attacks like Nobelium, Hafnium, and more recently last week’s Colonial Pipeline attack, which signals that human-operated ransomware is on the rise. Hackers launch an average of 50 million password attacks...

How to secure your hybrid work world with a Zero Trust approach

We are operating in the most complex cybersecurity landscape we’ve ever seen. Sophisticated and determined attackers are the norm. And we all are preparing for the next great disruption—hybrid work. Security has never been more important, and as I shared in another Security blog today, it’s clear...

How to secure your hybrid work world with a Zero Trust approach

We are operating in the most complex cybersecurity landscape we’ve ever seen. Sophisticated and determined attackers are the norm. And we all are preparing for the next great disruption—hybrid work. Security has never been more important, and as I shared in another Security blog today, it’s clear...

Broadcom Brocade SANnav 信任管理问题漏洞

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. Broadcom Brocade SANnav has a security vulnerability. An attacker can use multiple vulnerabilities through the program SANnav...

JetBrains TeamCity Trust Management Issues Vulnerability (CNVD-2021-35238)

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A vulnerability exists in JetBrains TeamCity...

Colonial Pipeline attack expected to trigger imminent hardening of cybersecurity rules for federal agencies

UPDATE 04:23 pm Pacific Time, May 12: On Wednesday, President Joe Biden signed an Executive Order that broadly directs the Commerce Department to create cybersecurity standards for companies that sell software to the federal government. The Order comes in the immediate aftermath of a ransomware...

Gartner names Microsoft a Leader in the 2021 Endpoint Protection Platforms Magic Quadrant

Our mission to empower defenders and protect and secure organizations has never been more important to us. Over the last year, our customers have faced unpredictable challenges and nearly overnight have had to quickly adapt in the face of a new hybrid work environment, evolving sophistication and...

Jetbrains JetBrains TeamCity 授权问题漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A vulnerability exists in JetBrains TeamCity...

What does Zero Trust mean for API security?

The old mentality of building a moat around important assets and trusting anyone or anything that is already inside the castle perimeter has failed us. Attackers have developed many techniques to jump the moat and scale the castle walls to get at what they want. Thus, the new rallying cry is to...

Defeating the Pirates

In Akamai's paper, "Inside the World of Video Pirates," we discovered why digital intellectual property theft aka "piracy" is possibly the most misunderstood form of cybercrime facing the TV, sports, and film industries. The paper explored how piracy strategically impacts the industry, how the...

Motorola MH702 Trust Management Issues Vulnerability

The Motorola MH702 is a router from Motorola USA. A trust management issue vulnerability exists in Motorola MH702x devices prior to version 2.0.0.301, which can be exploited by an attacker to gain access to a communication channel by failing to properly validate server credentials when...

How to apply a Zero Trust approach to your IoT solutions

For many, 2020 was a year of survival as they rapidly transformed their businesses in response to a new normal. From enabling new remote and hybrid work models to implementing new technology to help optimize operations, the last year has seen a significant uptick in the proliferation and role of...

How to apply a Zero Trust approach to your IoT solutions

For many, 2020 was a year of survival as they rapidly transformed their businesses in response to a new normal. From enabling new remote and hybrid work models to implementing new technology to help optimize operations, the last year has seen a significant uptick in the proliferation and role of...

Advantech WISE-PaaS/RMM 信任管理问题漏洞

Advantech WISE-PaaS/RMM is a remote monitoring and management platform for IoT devices from Advantech Taiwan, China.Advantech WISE-PaaS/RMM versions prior to 9.0.1 are vulnerable to a trust management issue that stems from the presence of hard-coded credentials in the dashboard. An unauthenticate...