Millions of Twitter Users Affected by Information Exposure Flaw
http://feedproxy.google.com/~r/Securityweek/~3/yCHMR-q9xQw/millions-twitter-users-affected-information-exposure-flaw
Trend Micro’s Zero Day Initiative (ZDI) on Thursday made public details on a vulnerability impacting the Microsoft JET Database Engine, although a patch isn’t yet available for it.
http://feedproxy.google.com/~r/Securityweek/~3/WUgVbpuEFXg/zdi-shares-details-microsoft-jet-database-zero-day
Remote administration tools (RATs) installed for legitimate purposes in operational technology (OT) networks can pose a serious security risk, allowing malicious actors to abuse them in attacks aimed at industrial organizations, Kaspersky Lab warns.
http://feedproxy.google.com/~r/Securityweek/~3/SixeJgyUNAM/legitimate-rats-pose-serious-risk-industrial-systems
Rockwell Automation has patched several critical and high severity vulnerabilities in its RSLinx Classic communications software.
http://feedproxy.google.com/~r/Securityweek/~3/Sd8GTH6L2pQ/rockwell-automation-patches-severe-flaws-communications-software
Cisco this week addressed vulnerabilities in the Webex Network Recording Player for Advanced Recording Format (ARF) that could allow a remote attacker to execute arbitrary code on a targeted system.
http://feedproxy.google.com/~r/Securityweek/~3/DVCu_98MhpE/cisco-patches-code-execution-webex-player
A previously unknown financially motivated threat group is believed to be behind a series of attacks whose goal was to obtain payment card data from U.S. cities relying on Click2Gov software for utility bill payments.
http://feedproxy.google.com/~r/Securityweek/~3/vfTKvRFpIJI/click2gov-attacks-us-cities-attributed-previously-unknown-group
A critical vulnerability in NUUO software could allow attackers to remotely view video feeds and tamper with the recordings of hundreds of thousands of surveillance cameras, Tenable reveals.
http://feedproxy.google.com/~r/Securityweek/~3/3zSSSlqHMBc/critical-vulnerability-impacts-hundreds-thousands-iot-cameras
Facebook announced on Monday that it has expanded its bug bounty program to introduce rewards for reports describing vulnerabilities that involve the exposure of user access tokens.
http://feedproxy.google.com/~r/Securityweek/~3/kkOBUnO4HII/facebook-offers-rewards-access-token-exposure-flaws
A security researcher discovered several vulnerabilities in Alpine Linux, a distribution commonly used with Docker, including one that could allow for arbitrary code execution.
Based on musl and BusyBox, the Alpine Linux distribution has a small size and is heavily used in containers, including Docker, as it provides fast boot times.
http://feedproxy.google.com/~r/Securityweek/~3/PaoJ76-0ZHw/code-execution-alpine-linux-impacts-containers
Windows machines that haven’t been patched against the National Security Agency-linked EternalBlue exploit are stuck in an endless loop of infection, Avira warns.
http://feedproxy.google.com/~r/Securityweek/~3/G403H24lnqA/eternalblue-vulnerable-systems-serially-infected