Read Time:3 Second
A fifth of firms use accountants to help with compliance
Yearly Archives: 2023
Russian Invasion Sparks Global Wiper Malware Surge
Phishing Sites and Apps Use ChatGPT as Lure
Defense in depth — the Microsoft way (part 82): INVALID/BOGUS AppLocker rules disable SAFER on Windows 11 22H2
Read Time:20 Second
Posted by Stefan Kanthak on Feb 22
Hi @ll,
in Windows 11 22H2. some imbeciles from Redmond added the following
(of course WRONG and INVALID) registry entries and keys which they
dare to ship to their billion world-wide users:
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSrpGp]
“RuleCount”=dword:00000002
“LastWriteTime”=hex(b):01,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSrpGpDLL]
JFTR: the time stamp is 100ns past…
Multiple vulnerabilities in Audiocodes Device Manager Express
Read Time:20 Second
Posted by Eric Flokstra on Feb 22
# Product Name: Device Manager Express
# Vendor Homepage: https://www.audiocodes.com
# Software Link:
https://www.audiocodes.com/solutions-products/products/management-products-solutions/device-manager
# Version: <= 7.8.20002.47752
# Tested on: Windows 10 / Server 2019
# Default credentials: admin/admin
# CVE-2022-24627, CVE-2022-24628, CVE-2022-24629, CVE-2022-24630,
CVE-2022-24631, CVE-2022-24632
# Exploit:…
Sumo Logic keep api credentials on endpoints
Read Time:20 Second
Posted by dammitjosie— via Fulldisclosure on Feb 22
security bug:
go sumologic.com (big company, many customer)
make free account
log in account, make access key – help.sumologic.com/docs/manage/security/access-keys/
<http://help.sumologic.com/docs/manage/security/access-keys/>
download collector for windows –
help.sumologic.com/docs/send-data/installed-collectors/collector-installation-reference/download-collector-from-static-url/
<…
Cyberattacks hit data centers to steal information from global companies
Read Time:29 Second
Cyberattacks targeting multiple data centers in several regions globally have been observed over the past year and a half, resulting in exfiltration of information pertaining to some of the world’s biggest companies and the publishing of access credentials on the dark web, according to cybersecurity company Resecurity.
“Malicious cyber activity targeting data center organizations creates a significant precedent in the context of supply chain cybersecurity,” Resecurity said in a blog post. “Resecurity expects attackers to increase malicious cyber activity related to data centers and their customers.”
Smashing Security podcast #310: Verified blue ticks and horny AI chatbots
Read Time:13 Second
Boyfriends who are bots, Facebook’s checkmark charge, Twitter Blue, and Will Ferrell’s taunt of football fans…
All this and more is discussed in the latest edition of the “Smashing Security” podcast by computer security veterans Graham Cluley and Carole Theriault.
DSA-5359 chromium – security update
Read Time:7 Second
Multiple security issues were discovered in Chromium, which could result
in the execution of arbitrary code, denial of service or information
disclosure.
DSA-5360 emacs – security update
Read Time:8 Second
Xi Lu discovered that missing input sanitising in Emacs (in etags, the
Ruby mode and htmlfontify) could result in the execution of arbitrary
shell commands.