CVE-2022-23451

An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or delete metadata from any secret regardless ...

Continue Reading
Akamai Named a 2022 Gartner? Magic Quadrant Leader for Cloud Web Application and API Protection

Akamai was named a Leader in the 2022 Gartner? Magic Quadrant for Cloud Web Application and API Protection (WAAP) report, and was positioned highest for Ability to Execute and furthest for Completenes ...

Continue Reading
Imperva Is a Magic Quadrant Leader for Web Application and API Protection (again)

With the summer coming to a close we are now entering into “Magic Quadrant” season for the application security market and this means the latest edition of the 2022 Gartner® Magic Quadrant![™](htt ...

Continue Reading
(RHSA-2022:6351) Important: OpenShift Virtualization 4.10.5 Images security and bug fix update

OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains the following OpenShift Virtualization 4.10.5 images: RHEL-8-CNV ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - MEDIUM

Akamai Named a 2022 Gartner? Magic Quadrant Leader for Cloud Web Application and API Protection

Akamai was named a Leader in the 2022 Gartner? Magic Quadrant for Cloud Web Application and API Protection (WAAP) report, and was positioned highest for Ability to Execute and furthest for Completenes ...

Continue Reading
5 Steps for Dealing With Unknown Environments in InsightVM

![5 Steps for Dealing With Unknown Environments in InsightVM](https://blog.rapid7.com/content/images/2022/09/unknown-environments-insightvm.jpg) Trying to deal with a large network can be difficult. A ...

Continue Reading
FortiSOAR – Path traversal vulnerabilities in the web API

Multiple relative path traversal vulnerabilities [CWE-23] in the web API of FortiSOAR may allow an authenticated attacker to write in the underlying filesystem with nginx permissions via crafted HTTP ...

Continue Reading
Integrating Live Patching in SecDevOps Workflows

[![Live Patching in SecDevOps](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEjfmQm0zKbyR73spEctGRq4kxnUbZ66a9D8B5mMvzQerD-kX-uueeftEy2-n6xt7724eltYxCGF7cLcFd8-RLQApa1L7rAyKcn6BPYRSclhxOVr3 ...

Continue Reading

Back to Main

Subscribe for the latest news: