[KIS-2022-05] Joomla! <= 4.1.0 (Tar.php) Zip Slip Vulnerability
Posted by Egidio Romano on Mar 29 ------------------------------------------------- Joomla! <= 4.1.0 (Tar.php) Zip Slip Vulnerability ------------------------------------------------- [-] Software Link: http://www.joomla.org/ [-] Affected Versions: Version 4.1.0...
Cr8escape: How Tenable Can Help (CVE-2022-0811)
CrowdStrike discloses container escape vulnerability affecting CRI-O for Kubernetes. Here’s how Tenable.cs can help you detect vulnerable pods. Background On March 15, CrowdStrike published technical...
Personal Data of 620 FSB Officers Published Online
Ukrainian Directorate of Intelligence shares personal data of Russian agents Read More
USN-5351-2: Paramiko vulnerability
USN-5351-1 fixed a vulnerability in Paramiko. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Jan Schejbal discovered that Paramiko incorrectly...
Yandex is Sending iOS Users’ Data to Russia
Researcher claims Russian tech company is sending data harvested from iOS app users to Russia Read More
82% of Public Sector Applications Contain Security Flaws
The researchers also found the public sector takes twice as long to fix flaws once detected compared to other industries Read More
Dental Practice Fined for Sharing Patient Data on Social Media
OCR fines dental practice $50K for disclosing PHI of patient who posted a negative review online Read More
How to evaluate SOC-as-a-service providers
If you don’t currently have your own security operations center (SOC), you have two ways to get one: Build your own or use some managed...
Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests”
There is a terrifying and highly effective “method” that criminal hackers are now using to harvest sensitive customer data from Internet service providers, phone companies...
Nebulon time jumps ransomware recovery through smart-infra hack
Nebulon has launched TimeJump, a ransomware recovery tool designed to restore a system in minutes after a breach. TimeJump is designed to reduce the time...