CISA Issues Alert for Microsoft Netlogon Vulnerability
CISA has issued an alert following the discovery of publicly available exploit code for Windows elevation of privilege flaw CVE-2020-1472.
Source: Dark
[...]
vulnerability
Security Vulnerability updates on leading operating systems, software, web apps aggregated from the internet.
BLURtooth – A new Vulnerability Let Attackers to Overwrite the Authentication Keys
Security researchers from at the École Polytechnique Fédérale de Lausanne (EPFL) and Purdue University discovered vulnerabilities related to Cross-Transport Key Derivation (CTKD) with
[...]
Secureworks to Buy Delve Laboratories for Vulnerability Management
Delve’s automated vulnerability platform provides insight on high-risk vulnerabilities across an organization’s network, endpoints, and cloud.
Source: Dark Reading – Threat Intelligence
[...]
Facebook Debuts Third-Party Vulnerability Disclosure Policy
If the social-media behemoth finds a bug in another platform’s code, the project has 90 days to remediate before Facebook goes public.
[...]
U.S. Agencies Must Adopt Vulnerability-Disclosure Policies by March 2021
U.S. agencies must implement vulnerability-disclosure policies by March 2021, according to a new CISA mandate.
Source: Threat Post – Web Security –
[...]
Slack Patches Critical Desktop Vulnerability
The remote code execution flaw could allow a successful attacker to fully control the Slack desktop app on a target machine.
Source:
[...]
New Jenkins Vulnerability Let Hackers Steal Sensitive Information By Obtain HTTP response headers
Recently, the security experts have detected a new vulnerability in Jenkins Server that was termed as CVE-2019-17638. This vulnerability could occur in memory
[...]
Vulnerability Prioritization: Are You Getting It Right?
Developers must find a way to zero in on the security vulns that present the most risk and quickly address them without slowing
[...]
Black Hat USA 2020: Dangerous Wi-Fi KrØØk Vulnerability Affected More wi-fi chipset Than Previously Disclosed
The security researchers have recently detected that small Qualcomm and MediaTek Wi-Fi chips are vulnerable to the latest variants of the KrØØk data
[...]
BootHole Vulnerability Affects Millions of Windows and Linux Systems – Allows Attackers to Install Stealthy Malware
Security researchers uncovered a new vulnerability dubbed “BootHole” present in the GRUB2 bootloader utilized by Windows and Linux systems. Attackers can exploit this
[...]