Boom Goes the Cyber Security Toolbox
More Cyber Security Tools Can Increase Cost, Increase Complexity, and Reduce an Organization’s Ability to be Effective read more Source: Security Week Boom Goes the Cyber Security Toolbox
Continue ReadingColorado city forced to pay $45,000 ransom to decrypt files
The City of Lafayette in Colorado, USA has been forced to pay $45,000 after the City’s devices were encrypted in July and they were unable to restore necessary files from backup. […] Source: leepingcomputer.com Colorado city forced to pay ,000 ransom to decrypt files
Continue ReadingCybersecurity Skills Gap Worsens, Fueled by Lack of Career Development
The fundamental causes for the skill gap are myriad, starting with a lack of training and career-development opportunities. Source: Threatpost.com Cybersecurity Skills Gap Worsens, Fueled by Lack of Career Development
Continue ReadingAdobe Patches 11 Critical Vulnerabilities in Acrobat and Reader
Adobe on Tuesday informed customers that it has patched 26 vulnerabilities in its Acrobat and Reader products, including 11 critical flaws that can be exploited to bypass security features and for arbitrary code execution. read more Source: Security Week Adobe Patches 11 Critical Vulnerabilities in Acrobat and Reader
Continue ReadingNew ESG Survey Report: Modern Application Development Security
As organizations continue to adopt DevSecOps, a methodology that shifts security measures to the beginning of the software development lifecycle (SDLC), roles and processes are evolving. Developers are expected to take on increased security measures ??? such as application security (AppSec) scans, flaw remediation, and secure coding ??? and security professionals are expected to take […]
Continue ReadingSamsung Quietly Fixed Critical Galaxy Flaws Allowing Spying, Data Wiping
Four critical-severity flaws were recently disclosed in the Find My Mobile feature of Samsung Galaxy smartphones, which if exploited could allow attackers to force a factory reset on the phones or spy on users. Source: Threatpost.com Samsung Quietly Fixed Critical Galaxy Flaws Allowing Spying, Data Wiping
Continue ReadingCERTFR-2020-AVI-496 : Multiples vulnérabilités dans Adobe Reader et Acrobat (11 août 2020)
De multiples vulnérabilités ont été découvertes dans Adobe Reader et Acrobat. Certaines d’entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service et un contournement de la politique de sécurité. Source: Cert FR CERTFR-2020-AVI-496 : Multiples vulnérabilités dans Adobe Reader et Acrobat (11 août 2020)
Continue ReadingvBulletin Patches Zero-Day Exploited in Attacks
vBulletin developers on Monday rushed to address a zero-day remote code execution (RCE) vulnerability in the forum software, one day after the issue was publicly disclosed. Written in PHP, vBulletin is highly popular among numerous large brands, including Electronic Arts, Pearl Jam, Sony, Steam, Zynga, and others. read more Source: Security Week vBulletin Patches Zero-Day […]
Continue ReadingCERTFR-2020-AVI-495 : Multiples vulnérabilités dans les produits SAP (11 août 2020)
De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d’entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l’éditeur, une exécution de code arbitraire à distance et un contournement de la politique de sécurité. Source: Cert FR CERTFR-2020-AVI-495 : Multiples vulnérabilités dans les produits SAP (11 août […]
Continue ReadingA New vBulletin 0-Day RCE Vulnerability and Exploit Disclosed Publicly
A security researcher earlier today publicly revealed details and proof-of-concept exploit code for an unpatched, critical zero-day remote code execution vulnerability affecting the widely used internet forum software vBulletin that’s already under active exploitation in the wild. vBulletin is a widely used proprietary Internet forum software package based on PHP and MySQL database server that […]
Continue Reading