White Papers
Video

Latest Comment: I said I wanted ‘fish’ for dinner, he thought I said ‘phish’.
Current Issue
2021 Top Enterprise IT TrendsWe’ve identified the key trends that are poised to impact the IT landscape in 2021. Find out why they’re important and how they will affect you today!Flash Poll

Building the SOC of the Future
Digital transformation, cloud-focused attacks, and a worldwide pandemic. The past year has changed the way business works and the way security teams operate. There is no going back.
Twitter Feed

Bug Report
From DHS/US-CERT’s National Vulnerability Database
CVE-2021-26712
PUBLISHED: 2021-02-18
Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to prematurely terminate secure calls by replaying SRTP packets.
CVE-2021-26747
PUBLISHED: 2021-02-18
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.
CVE-2020-35591
PUBLISHED: 2021-02-18
Pi-hole 5.0, 5.1, and 5.1.1 allows Session Fixation. The application does not generate a new session cookie after the user is logged in. A malicious user is able to create a new session cookie value and inject it to a victim. After the victim logs in, the injected cookie becomes valid, giving the at…
CVE-2020-35592
PUBLISHED: 2021-02-18
Pi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options header to the admin/ URI. A remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against other users and steal the session cookie.
CVE-2020-35776
PUBLISHED: 2021-02-18
A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows remote attacker to crash Asterisk by deliberately misusing SIP 181 responses.
The post CrowdStrike Buys Log Management Startup Humio for $400M appeared first on Malware Devil.
https://malwaredevil.com/2021/02/18/crowdstrike-buys-log-management-startup-humio-for-400m-2/?utm_source=rss&utm_medium=rss&utm_campaign=crowdstrike-buys-log-management-startup-humio-for-400m-2



No comments:
Post a Comment