InfoSec News Feeds
Aggregated InfoSec News
Packetstorm
- C-MOR Video Surveillance 5.2401 / 6.00PL01...on 6 September 2024 at 5:06 PM
C-MOR Video Surveillance versions 5.2401 and 6.00PL01 suffer from a command injection vulnerability.
- C-MOR Video Surveillance 5.2401 Insecure...on 6 September 2024 at 5:05 PM
C-MOR Video Surveillance version 5.2401 makes use of unmaintained vulnerability third-party components.
- C-MOR Video Surveillance 5.2401 / 6.00PL01...on 6 September 2024 at 5:03 PM
C-MOR Video Surveillance versions 5.2401 and 6.00PL01 stores sensitive information, such as credentials, in clear text.
THN
- North Korean Threat Actors Deploy COVERTCATCH...by info@thehackernews.com (The Hacker News) on 7 September 2024 at 8:28 AM
Threat actors affiliated with North Korea have been observed leveraging LinkedIn as a way to target developers as part of a fake job recruiting operation. These attacks employ coding tests as a common initial infection vector, Google-owned Mandiant said in a new report about threats faced by the […]
- FBI Cracks Down on Dark Web Marketplace Managed...by info@thehackernews.com (The Hacker News) on 7 September 2024 at 8:10 AM
Two men have been indicted in the U.S. for their alleged involvement in managing a dark web marketplace called WWH Club that specializes in the sale of sensitive personal and financial information. Alex Khodyrev, a 35-year-old Kazakhstan national, and Pavel Kublitskii, a 37-year-old Russian […]
- SonicWall Urges Users to Patch Critical Firewall...by info@thehackernews.com (The Hacker News) on 6 September 2024 at 4:55 PM
SonicWall has revealed that a recently patched critical security flaw impacting SonicOS may have come under active exploitation, making it essential that users apply the patches as soon as possible. The vulnerability, tracked as CVE-2024-40766, carries a CVSS score of 9.3 out of a maximum of 10. […]
PortSwigger
- We’re going teetotal: It’s goodbye to The...on 2 March 2023 at 3:05 PM
PortSwigger today announces that The Daily Swig is closing down
- Bug Bounty Radar // The latest bug bounty...on 28 February 2023 at 8:15 PM
New web targets for the discerning hacker
- Indian transport ministry flaws potentially...on 28 February 2023 at 3:15 PM
Armed with personal data fragments, a researcher could also access 185 million citizens’ PII
Security Affaris
- U.S. CISA adds Draytek VigorConnect and Kingsoft...by Pierluigi Paganini on 7 September 2024 at 5:19 PM
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Draytek VigorConnect and Kingsoft WPS Office bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Draytek VigorConnect and Kingsoft WPS Office vulnerabilities to […]
- A flaw in WordPress LiteSpeed Cache Plugin allows...by Pierluigi Paganini on 7 September 2024 at 12:13 PM
A critical flaw in the LiteSpeed Cache plugin for WordPress could allow unauthenticated users to take control of arbitrary accounts. The LiteSpeed Cache plugin is a popular caching plugin for WordPress that accounts for over 5 million active installations. The plugin offers site acceleration […]
- Car rental company Avis discloses a data breachby Pierluigi Paganini on 6 September 2024 at 10:48 PM
Car rental giant Avis disclosed a data breach that impacted one of its business applications in August compromising customers’ personal information. Car rental company Avis notified customers impacted in an Augus data breach. Threat actors breached one of its business applications and gained […]
HackerOne
- Quantifying the Value of Bug Bounty Programs:...by HackerOne on 4 September 2024 at 10:49 PM
Is ROI the right method to measure bug bounty value? Check out the cost-benefit analysis of ROI vs. ROM.
- Crushing FUD: Embracing Ethical Hackers to...by Antoine Williams-Baisy on 3 September 2024 at 7:07 PM
FUD can overshadow proactive collaboration with ethical hackers. Let's explore how to combat FUD and get organizational buy-in for bug bounty and VDP.
- HackerOne’s Commitment to Learning and...by Debbie Cotton on 30 August 2024 at 5:53 PM
WeLiveSecurity
- Bitcoin ATM scams skyrocket – Week in security...on 6 September 2024 at 11:25 AM
The schemes disproportionately victimize senior citizens, as those aged 60 or over were more than three times as likely as younger adults to fall prey to the scams
- ESET Research Podcast: HotPageon 5 September 2024 at 10:26 AM
ESET researchers discuss HotPage, a recently discovered adware armed with a highest-privilege, yet vulnerable, Microsoft-signed driver
- The key considerations for cyber insurance: A...on 4 September 2024 at 10:00 AM
Would a more robust cybersecurity posture impact premium costs? Does the policy offer legal cover? These are some of the questions organizations should consider when reviewing their cyber insurance options
TheRegister
- Despite cyberattacks, water security standards...by Jessica Lyons on 7 September 2024 at 1:33 PM
White House floats round two of regulations Feature It sounds like the start of a bad joke: Digital trespassers from China, Russia, and Iran break into US water systems.…
- Uncle Sam charges Russian GRU cyber-spies behind...by Jessica Lyons on 5 September 2024 at 8:44 PM
Feds post $10M bounty for each of the six's whereabouts The US today charged five Russian military intelligence officers and one civilian for their alleged involvement with the data-wiping WhisperGate campaign conducted against Ukraine in January 2022 before the ground invasion began.…
- The fingerpointing starts as cyber incident at...by Richard Speed on 5 September 2024 at 11:00 AM
Network admins take a ride on the Fright Bus The Transport for London (TfL) "cyber incident" is heading into its third day amid claims that a popular appliance might have been the gateway for criminals to gain access to the organization's network.…
Security Week
- US Gov Removing Four-Year-Degree Requirements for...by SecurityWeek News on 6 September 2024 at 5:44 PM
The US government will remove "unnecessary degree requirements" in favor of skills-based hiring to help fill 500,000 open cybersecurity jobs. The post US Gov Removing Four-Year-Degree Requirements for Cyber Jobs appeared first on SecurityWeek.
- Recent SonicWall Firewall Vulnerability...by Eduard Kovacs on 6 September 2024 at 2:10 PM
SonicWall is warning customers that the recently patched critical vulnerability CVE-2024-40766 may be exploited in the wild. The post Recent SonicWall Firewall Vulnerability Potentially Exploited in the Wild appeared first on SecurityWeek.
- In Other News: US Army Hacks Buildings, X Hiring...by SecurityWeek News on 6 September 2024 at 1:47 PM
Noteworthy stories that might have slipped under the radar: US Special Forces can hack buildings, X is hiring cybersecurity staff, and FTC warns of Bitcoin ATM scams. The post In Other News: US Army Hacks Buildings, X Hiring Cybersecurity Staff, Bitcoin ATM Scams appeared first on SecurityWeek.
Exploit-DB Updates
- [dos] Windows TCP/IP - RCE Checker and Denial of...on 28 August 2024 at 1:00 AM
Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Gitea 1.22.0 - Stored XSSon 28 August 2024 at 1:00 AM
Gitea 1.22.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Executionon 28 August 2024 at 1:00 AM
Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSSon 28 August 2024 at 1:00 AM
NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver...on 24 August 2024 at 1:00 AM
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver...on 24 August 2024 at 1:00 AM
Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
ABOUT US
RiSec represents an autonomous, non-profit alliance comprising of individuals dedicated to enhancing cybersecurity awareness and education. Read more
Contact us: security@realinfosec.net
Social
Subscribe for weekly updates
Copyright © RiSec 2023 All rights reserved.
All trademarks, logos, images and brand names are the property of their respective owners.