+84949482065
IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. Read here https://www.ibm.com/support/pages/node/6517470
This vulnerability is considered critical as it may be leveraged to completely compromise the vulnerable application as well as the underlying operating system. Dell recommends customers to upgrade at the…
BeyondTrust Privilege Management for Windows contains a local privilege escalation vulnerability prior to version 21.6. More https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0008/MNDT-2021-0008.md
Sophisticated Tardigrade malware launches attacks on vaccine manufacturing infrastructure. Read more in my article on the Tripwire blog https://www.tripwire.com/state-of-security/security-data-protection/sophisticated-tardigrade-malware-launches-attacks-on-vaccine-manufacturing-infrastructure/
TESLA PHONE THIS 2021? It’s been widely reported that US-based EV maker Tesla will “officially” launch the Model Pi phone "later this year". It’s not clear exactly when, if at…
The exploit, unveiled in research presented today, revives the DNS cache-poisoning attack that researcher Dan Kaminsky disclosed in 2008. He showed that, by masquerading as an authoritative DNS server and…
Default passwords for internet-connected devices will be banned, and firms which do not comply will face huge fines. Read more https://www-bbc-com.cdn.ampproject.org/c/s/www.bbc.com/news/technology-59400762.amp
VMware has released security updates to address multiple vulnerabilities in vCenter Server and Cloud Foundation. A remote attacker can exploit this vulnerability to obtain access to sensitive information. More https://www.vmware.com/security/advisories/VMSA-2021-0027.html
This holiday season, ensure that you avoid falling for a gift card scam. Here are a series of common gift card scams to watch out for. Remember, no real enterprise,…
Ouch. If you host a wordpress site on GoDaddy, now is a good time to update your credentials. More https://www.zdnet.com/google-amp/article/over-a-million-godaddy-managed-wordpress-sites-cracked/
