🐛 COMMON VULNERABILITIES AND EXPOSURES 2[−]
3 SepPoC Exploit Released for Critical VMware Aria's SSH Auth Bypass VulnerabilityProof-of-concept (PoC) exploit code has been made available for a recently disclosed and patched critical flaw impacting VMware Aria Operations for Networks (formerly vRealize Network Insight). The flaw, tracked as CVE-2023-34039, is rated 9.8 out of a maximum of 10 for severity …THEHACKERNEWS.COM
3 SepCVE-2023-24872 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityUpdated the links to the Windows Update Catalog. This is an informational change only.MSRC.MICROSOFT.COM
⚠️ VULNERABILITY DISCLOSURE 3[−]
3 SepWeek in review: 11 search engines for cybersecurity research, PoC for RCE in Juniper firewall releasedHere’s an overview of some of last week’s most interesting news, articles, interviews and videos: Adapting authentication to a cloud-centric landscape In this Help Net Security interview, Florian Forster, CEO at Zitadel, discusses the challenges CISOs face in managing authenticat…HELPNETSECURITY.COM
3 SepHackers Adding More Capabilities to Open Source MalwareSapphireStealer Enables Hackers to Steal Sensitive Corporate Credentials Multiple hackers are minting newer capabilities from an open source information stealer to spawn new variants. The malware steals sensitive information such as corporate credentials, which are resold to othe…DATABREACHTODAY.CO.UK
3 SepSecure FastAPI with eBPFsubmitted by L4s to secops 1 points | 0 comments https://avi-lumelsky.medium.com/secure-fastapi-with-ebpf-724d4aef8d9e?source=friends_link&sk=b01a6b97ef09003b53cd52c479017b03 Secure FastAPI with eBPF::undefinedAVI-LUMELSKY.MEDIUM.COM
🔥 INCIDENT REPORTING 1[−]
3 SepUniversity of Sydney data breach impacts recent applicantsThe University of Sydney (USYD) has announced it has suffered a data breach through a third-party service provider, exposing the personal data of recently applied and enrolled international applicants. [...]BLEEPINGCOMPUTER.COM
🕵️ THREAT INTELLIGENCE 5[−]
3 SepChampioning cybersecurity regulatory affairs with Nidhi GaniNidhi Gani is a seasoned regulatory affairs professional with over a decade of experience in cybersecurity, medical devices, and digital health. She’s worked with devices ranging from heart and lung machines to rehabilitation devices. Nidhi works at Embecta as a Regulatory Affair…HELPNETSECURITY.COM
3 SepAnalysis of a Defective Phishing PDF, (Sun, Sep 3rd)A reader submitted a suspicious PDF file . TLDR: it&#;x26;#;39;s a defective phishing PDF.
ISC.SANS.EDU
3 SepModern Security Podcast: Dev Akhawe from Figma on How to Scale Security with Secure Defaultssubmitted by ashar to security_cpe 1 points | 0 comments https://youtu.be/MizrgSgtS9E?si=bzCmkhkgebS905qu Modern Security Podcast: Dev Akhawe on How to Scale Security with Secure Defaults For our first episode of The Modern Security Podcast, we had a wide-ranging conversation wit…YOUTU.BE
3 Sep21st Century Hackers | Full Hacking Documentary 2021 - 52 minutessubmitted by ashar to security_cpe 1 points | 0 comments https://youtu.be/nsKIADw7TEM?si=Uzatpz_zFA3BgA4q In this documentary, learn about “white hat” hackers, the U.S. Secret Service’s cyber crime division working to protect us from the risks associated with persistent connectiv…YOUTU.BE
3 SepChina-linked cybercriminals bypass Barracuda’s security patchsubmitted by L4s to secops 1 points | 0 comments https://deform.co/china-linked-cybercriminals-bypass-barracudas-security-patch/ China-linked cybercriminals bypass Barracuda’s security patch::Barracuda email security gateway devices became the target of a cyber espionage attack f…DEFORM.CO
📡 INFOSEC NEWS 3[−]
3 SepChildren's snack recalled after its website caught serving pornSupermarket chain Lidl has been recalling four types of PAW Patrol-themed snacks across the UK. Except, the reason for the recall has got nothing to do with food contents, but the website listed on the snack's packaging serving porn. [...]BLEEPINGCOMPUTER.COM
3 SepMicrosoft reminds users Windows will disable insecure TLS soonMicrosoft reminded users that insecure Transport Layer Security (TLS) 1.0 and 1.1 protocols will be disabled soon in future Windows releases. [...]BLEEPINGCOMPUTER.COM
3 SepWindows 11 23H2: Top three new featuresThe highly anticipated Windows 11 23H2 update is around the corner, and Microsoft has released its best features to testers in the Beta Channel. [...]BLEEPINGCOMPUTER.COM