How the Work-From-Home Shift Impacts SaaS Security

The data is in. According to IBM Security's 2020 Cost of a Data Breach Report, there is a 50% increase in cloud usage for enterprises across all industries. The number of threats targeting cloud services, predominantly collaboration services like Office 365, has increased 630%. Moreover, 75% of...

The vulnerability of the Samba networking communication package is related to deficiencies in authentication procedures, which allow attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Samba network communication package is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integrity...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges by using a specially created application...

The vulnerability of the RabbitMQ messaging broker, related to deficiencies in the security measures used for protecting web page structures, allows attackers to compromise data integrity.

The vulnerability of the RabbitMQ messaging broker is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of Hikvision’s IP cameras’ microprogramming software, related to authentication procedures that lack sufficient safeguards, allows intruders to exploit their privileges.

The vulnerability of Hikvision’s IP cameras related to microprogramming software lies in the deficiencies in authentication procedures. Exploiting this vulnerability can allow unauthorized actors to enhance their privileges remotely...

The vulnerability of the `dojox.xmpp.util.xmlEncode` component in the dojox JavaScript library allows a attacker to compromise data integrity.

The vulnerability of the dojox.xmpp.util.xmlEncode component in the dojox JavaScript library is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

The vulnerability of the FortiMail email security system, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the FortiMail email security system is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges by requesting a password change through the user interface...

The vulnerability of the FortiADC application delivery controller, related to deficiencies in the authentication mechanism, allows a perpetrator to trigger a service failure.

The vulnerability of the FortiADC application delivery controller is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the PostgreSQL database management system, related to deficiencies in authentication mechanisms, allows attackers to gain unauthorized access to protected information.

The vulnerability of the PostgreSQL database management system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the File System API interface in the Google Chrome web browser allows a hacker to circumvent existing security restrictions.

The vulnerability of the File System API interface in the Google Chrome web browser is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the components of Web Services in Oracle WebLogic Server’s application servers allows attackers to gain access to modify, add, or delete data.

The vulnerability of the components of Oracle WebLogic Server’s application services is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol over the network...

Industrial Networks See Sharp Uptick in Hackable Security Holes

It’s on: Adversaries, CISOs and researchers are all simultaneously involved in a frantic race to find cybersecurity vulnerabilities hiding within industrial networks, according to the latest Biannual ICS Risk and Vulnerability report from Claroty. The report analyzed all publicly disclosed...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Samples component of the Oracle WebLogic Server application server allows a hacker to gain full control over the application.

The vulnerability of the Samples component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application through the use of IIOP and T3 protocols...

Vulnerability of the Server component: Security: Privileges of the MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the MySQL Server component’s Security: Privileges section is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

The vulnerability of the Bluetooth BR/EDR encryption key negotiation protocol lies in its authentication procedures’ deficiencies, which allow attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Bluetooth BR/EDR encryption key negotiation protocol is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

The vulnerability of Trend Micro InterScan Web Security Virtual Appliance, related to deficiencies in authentication procedures, allows attackers to bypass the authentication process.

The vulnerability of Trend Micro InterScan Web Security Virtual Appliance is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

The vulnerability of the Windows operating system’s Multipoint Management service allows a hacker to escalate their privileges.

The vulnerability of the Windows operating system’s Multipoint Management service is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the WalletService service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the WalletService service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...