Aggregator

More than 61,000 vulnerabilities patched and counting

Curating raw data into original insights, WatchTower's 2022 Review reflects on the previous year's top threats and trends.

The post WatchTower 脅威インテリジェンスサービス ｜2022 年のサイバーセキュリティのトレンドと重要ポイント appeared first on SentinelOne JP.

Recently I got the feedback to create more tutorials and videos, and I thought SSH Agent Hijacking on Linux and macOS (which I wrote about before here) would make a good one.

The video tutorial is here.

If you like this kind of content, then comment or like the video on YouTube and I’ll create more.

Hope it’s useful to get a good basic understanding of this TTP, and help build detections for it.

Summary VMware has released a fix for two critical vulnerabilities in VMware Aria Operations for Logs. The vulnerabilities both have a CVSS score of 9.8. Threat Type Vulnerability Overview On Tuesday, January 25, VMware released updates/upgrades for two critical vulnerabilities in its vRealize Log Insight (now VMware Aria Operations for Logs) software that could allow attackers to gain remote access via non-upgraded appliances. Both CVE-2022-31704 and CVE-2022-31706 have CVSS scores of 9.8 indicating a high

Pre- and post-auth path to pwnage

Password vault vendor accused of making a hash of encryption

Akamai researchers have analyzed a critical vulnerability in Microsoft's CryptoAPI that would allow an attacker to masquerade as a legitimate entity.

旅行中的碎片记忆

旅行中的碎片记忆

旅行中的碎片记忆

旅行中的碎片记忆

旅行中的碎片记忆

旅行中的碎片记忆

Manufacturer complacency ‘translates into an unacceptable risk for consumers’, warns security expert

PayPal recently notified thousands of its customers that their accounts were breached by hackers, leaving their Social Security Numbers and...

The post The PayPal Breach – Who Was Affected and How You Can Protect Yourself appeared first on McAfee Blog.

See which vulnerabilities caught attackers’ eyes in December 2022.

See which vulnerabilities caught attackers’ eyes in December 2022.

See which vulnerabilities caught attackers’ eyes in December 2022.

Threat actors poking around AWS environments and API calls could stay under the radar