Millions of Twitter Users Affected by Information Exposure Flaw read more http://feedproxy.google.com/~r/Securityweek/~3/yCHMR-q9xQw/millions-twitter-users-affected-information-exp..
Tag : Vulnerabilities
Trend Micro’s Zero Day Initiative (ZDI) on Thursday made public details on a vulnerability impacting the Microsoft JET Database Engine, although a patch isn’t yet available for it. read more http://feedproxy.google.com/~r/Securityweek/~3/WUgVbpuEFXg/zdi-shares-details-microsoft-jet-databas..
Remote administration tools (RATs) installed for legitimate purposes in operational technology (OT) networks can pose a serious security risk, allowing malicious actors to abuse them in attacks aimed at industrial organizations, Kaspersky Lab warns. read more http://feedproxy.google.com/~r/Securityweek/~3/SixeJgyUNAM/legitimate-rats-pose-serious-risk-industri..
Rockwell Automation has patched several critical and high severity vulnerabilities in its RSLinx Classic communications software. read more http://feedproxy.google.com/~r/Securityweek/~3/Sd8GTH6L2pQ/rockwell-automation-patches-severe-flaws-communication..
Cisco this week addressed vulnerabilities in the Webex Network Recording Player for Advanced Recording Format (ARF) that could allow a remote attacker to execute arbitrary code on a targeted system. read more http://feedproxy.google.com/~r/Securityweek/~3/DVCu_98MhpE/cisco-patches-code-execution-we..
A previously unknown financially motivated threat group is believed to be behind a series of attacks whose goal was to obtain payment card data from U.S. cities relying on Click2Gov software for utility bill payments. read more http://feedproxy.google.com/~r/Securityweek/~3/vfTKvRFpIJI/click2gov-attacks-us-cities-attributed-previously-unk..
A critical vulnerability in NUUO software could allow attackers to remotely view video feeds and tamper with the recordings of hundreds of thousands of surveillance cameras, Tenable reveals. read more http://feedproxy.google.com/~r/Securityweek/~3/3zSSSlqHMBc/critical-vulnerability-impacts-hundreds-thousands-i..
Facebook announced on Monday that it has expanded its bug bounty program to introduce rewards for reports describing vulnerabilities that involve the exposure of user access tokens. read more http://feedproxy.google.com/~r/Securityweek/~3/kkOBUnO4HII/facebook-offers-rewards-access-token-expo..
A security researcher discovered several vulnerabilities in Alpine Linux, a distribution commonly used with Docker, including one that could allow for arbitrary code execution. Based on musl and BusyBox, the Alpine Linux distribution has a small size and is heavily used in containers, including Docker, as it provides fast boot times. read more http://feedproxy.google.com/~r/Securityweek/~3/PaoJ76-0ZHw/code-execution-alpine-linux-impacts-..
Windows machines that haven’t been patched against the National Security Agency-linked EternalBlue exploit are stuck in an endless loop of infection, Avira warns. read more http://feedproxy.google.com/~r/Securityweek/~3/G403H24lnqA/eternalblue-vulnerable-systems-seriall..
