Aggregator

A vulnerability was found in devitemsllc HT Mega Plugin up to 2.6.5 on WordPress and classified as problematic. This issue affects the function render of the file includes/widgets/htmega_accordion.php of the component Template Data Handler. The manipulation leads to exposure of sensitive information through metadata. The identification of this vulnerability is CVE-2024-8910. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Vonage VDV-23 115 3.2.11-0.9.40. This affects an unknown part of the file /goform/RgParentalBasic. The manipulation of the argument NewKeyword/NewDomain leads to cross site scripting (Stored). This vulnerability is uniquely identified as CVE-2017-16843. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Bitwarden announced further enhancements to inline autofill capabilities within the Bitwarden browser extension. Following the recent addition of autofill for cards and identities, this update ensures seamless autofill of passkeys, providing a faster, more secure, and convenient way for users to log into websites and applications that support passkey authentication. Bitwarden continues to see strong momentum in passkey adoption. Since announcing passkey management earlier this year, daily passkey creation peaked this summer at more than … More →

The post Bitwarden inline autofill empowers users to fill passkeys directly from their vault appeared first on Help Net Security.

error code: 521

追踪上半年全球的近百起勒索软件攻击事件，推出该报告以供参阅。

本期，一位非典型的安全圈创业者为我们分享其企业特色和创业心得。

A vulnerability classified as critical was found in PETA 1.1. Affected by this vulnerability is an unknown functionality of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is known as CVE-2014-7004. The attack needs to be approached within the local network. There is no exploit available.

Скандальный протест в Швеции вылился в массовую кибератаку.

Литий-ионные батареи уходят в прошлое?

A vulnerability was found in Oracle MySQL Server up to 5.7.13 and classified as problematic. This issue affects some unknown processing of the component Memcached. The manipulation leads to denial of service. The identification of this vulnerability is CVE-2016-5631. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Ignite Realtime Openfire 3.10.2. This affects an unknown part of the file user-edit-form.jsp. The manipulation of the argument isadmin leads to improper access controls. This vulnerability is uniquely identified as CVE-2015-7707. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in Goodwin 1.15. Affected is an unknown function of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is traded as CVE-2014-7003. Access to the local network is required for this attack to succeed. There is no exploit available.

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Virtual Traffic Manager vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Ivanti Virtual Traffic Manager authentication bypass vulnerability CVE-2024-7593(CVSS score of 9.8) to its Known Exploited Vulnerabilities (KEV) catalog. In Mid-August 2024, Ivanti addressed the vulnerability CVE-2024-7593 that impacts […]

本文探讨几种减轻安全运营团队过度警报负担的策略。

Commvault announced it will acquire Clumio, a technology leader in data protection for critical cloud data in AWS. This transaction enables Commvault to leverage Clumio’s AWS offerings to provide cyber resilience to next generation applications built on AWS. Clumio serves a wide range of customers including Atlassian, Cox Automotive, Duolingo, and LexisNexis. More and more organizations are relying on Amazon S3 as their de facto storage offering, including for AI development in the cloud. Clumio … More →

The post Commvault acquires Clumio to accelerate cyber resilience capabilities for AWS appeared first on Help Net Security.