⚠️ VULNERABILITY DISCLOSURE 3[−]
1 Nov127: MaddieMaddie Stone is a security researcher for Google’s Project Zero. In this episode we hear what it’s like battling zero day vulnerabilities. Sponsors Support for this show comes from Zscalar. Zscalar zero trust exchange will scrutinize the traffic and permit or deny traffic based o…DARKNETDIARIES.COM
1 NovOpenSSL 3 patch, once Heartbleed-level “critical,” arrives as a lesser “high”It's tricky to exploit, and on a less-popular version, but needs patching ASAP.ARSTECHNICA.COM
1 NovMicrosoft Mitigates Vulnerability in Jupyter Notebooks for Azure Cosmos DBSummary Summary Microsoft recently fixed an authentication bypass vulnerability in Jupyter Notebooks for Azure Cosmos DB (currently in preview) reported by Orca Security. Customers not using Jupyter Notebooks (99.8% of Azure Cosmos DB customers do NOT use Jupyter notebooks) were …MSRC.MICROSOFT.COM