Attackers are increasingly leveraging Internet Information Services (IIS) extensions as covert backdoors into servers, which hide deep in target environments and provide a durable persistence mechanis ...
Continue Reading
July 26, 2022
Attackers are increasingly leveraging Internet Information Services (IIS) extensions as covert backdoors into servers, which hide deep in target environments and provide a durable persistence mechanis ...
Continue Reading
July 26, 2022
In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. (An API request may, in effect, be executed with the credentials of a user who authentica ...
Continue Reading
July 26, 2022
The **Cyber Defense Awards** in conjunction with [_Cyber Defense Magazine_]() recently announced the winners of their prestigious annual **Global Infosec Awards for 2022**. We are proud to say that Im ...
Continue Reading
July 26, 2022
_The following is a guest blog by Aflac, a Qualys VMDR customer, on their recent experience completing a Proof of Concept project for the newly release VMDR 2.0 with Qualys TruRisk._ ### About Aflac ! ...
Continue Reading
July 26, 2022
Release of ACS 3.71 provides these changes: Security Fix(es): * go-tuf: No protection against rollback attacks for roles other than root (CVE-2022-29173) For more details about the security issue(s), ...
Continue Reading
July 25, 2022
According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.91, 9.3.x prior to 9.3.19 or 9.4.x prior to 9.4.3. It is, therefore, affected by multi ...
Continue Reading
July 25, 2022
According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.91, 9.3.x prior to 9.3.19 or 9.4.x prior to 9.4.3. It is, therefore, affected by multi ...
Continue Reading
July 25, 2022
Back to Main
