Read Time:5 Second
Multiple vulnerabilities have been discovered in Oracle products, which could allow for remote code execution.
Daily Archives: February 1, 2023
Take a tour of the Edgescan Cybersecurity Platform
Read Time:20 Second
Graham Cluley Security News is sponsored this week by the folks at Edgescan. Thanks to the great team there for their support! Edgescan simplifies Vulnerability Management (VM) by delivering a single full-stack SaaS solution integrated with world-class security professionals. Edgescan helps enterprise companies consolidate managing multiple point scanning tools for each layer of the attack … Continue reading “Take a tour of the Edgescan Cybersecurity Platform”
New “MITRE ATT&CK-like” framework outlines software supply chain attack TTPs
Read Time:34 Second
A new open framework seeks to outline a comprehensive and actionable way for businesses and security teams to understand attacker behaviors and techniques specifically impacting the software supply chain. The Open Software Supply Chain Attack Reference (OSC&R) initiative, led by OX Security, evaluates software supply chain security threats, covering a wide range of attack vectors including vulnerabilities in third-party libraries and components, supply chain attacks on build and deployment systems, and compromised or malicious software updates. Cybersecurity professionals among the matrix’s founding consortium include representatives from GitLab as well as former leaders from Microsoft, Google Cloud, Check Point Technologies, and OWASP.
Ransomware Attack Forces Closure of Nantucket Schools
Read Time:4 Second
The district’s superintendent Elizabeth Hallett announced the decision in an email to parents
Google Fi Confirms Data Breach, Hints At Link to T-Mobile Hack
Read Time:4 Second
The company uses a combination of T-Mobile and US Cellular for network connectivity
Researchers Claim High-Risk Vulnerabilities Found in 87% of All Container Images
Read Time:5 Second
But only 15% of these vulnerabilities with available fixes are in packages loaded at runtime
golang-github-google-dap-0.7.0-1.fc37
Read Time:9 Second
FEDORA-2023-8ecc0e487e
Packages in this update:
golang-github-google-dap-0.7.0-1.fc37
Update description:
Update go-dap to 0.7.0, also fix CVE-2022-41717
golang-github-google-dap-0.7.0-1.fc36
Read Time:9 Second
FEDORA-2023-cb3a59a3df
Packages in this update:
golang-github-google-dap-0.7.0-1.fc36
Update description:
Update go-dap to 0.7.0, also fix CVE-2022-41717
USN-5837-2: Django vulnerability
Read Time:16 Second
USN-5837-1 fixed a vulnerability in Django. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
Nick Pope discovered that Django incorrectly handled certain
Accept-Language headers. A remote attacker could possibly use this issue to
cause Django to consume memory, leading to a denial of service.
Almost all Organizations are Working with Recently Breached Vendors
Read Time:5 Second
The latest supply chain security report from SecurityScorecard and the Cyentia Institute shows worrying findings