Security Bulletin
14 May 2024
Biztonsági szemle
SUBNET PowerSYSTEM Center and Substation Server
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION: Low attack complexity Vendor: Subnet Solutions Inc. Equipment: PowerSYSTEM Center Vulnerabilities: Reliance on Insufficiently Trustworthy Component 2. RISK EVALUATION Successful exploitation of...
14 May 2024
Biztonsági szemle
CISA and Partners Release Guidance for Civil Society Organizations on Mitigating Cyber Threats with Limited Resources
CISA, in partnership with the Department of Homeland Security (DHS), the Federal Bureau of Investigation (FBI) and international partners, released Mitigating Cyber Threats with Limited Resources: Guidance for Civil Society. The joint guidance...
14 May 2024
Biztonsági szemle
Mitsubishi Electric Multiple FA Engineering Software Products
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.0 ATTENTION: Low attack complexity Vendor: Mitsubishi Electric Equipment: Multiple FA Engineering Software Products Vulnerabilities: Improper Privilege Management, Uncontrolled Resource Consumption, Out-of...
14 May 2024
Biztonsági szemle
Rockwell Automation FactoryTalk Remote Access
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.0 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: Factory Talk Remote Access Vulnerability: Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of this...
14 May 2024
Biztonsági szemle
Microsoft Releases May 2024 Security Updates
Title: Microsoft Releases May 2024 Security Updates Content: Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected...
![Biden May 2021 EO](/sites/default/files/styles/narrow_1x/public/feeds/4d/MalachiWalkerCol.webp?itok=uCsdTg-q)
14 May 2024
Biztonsági szemle
How the May 2021 Biden cybersecurity EO set the industry in motion
While much progress has been made around zero-trust over the past three years, the May 2021 EO did not take AI into account – and the industry has made adjustments.
![](/sites/default/files/styles/narrow_1x/public/feeds/bf/large.png.webp?itok=kmaKhout)
14 May 2024
Biztonsági szemle
ISC Stormcast For Tuesday, May 14th, 2024 https://isc.sans.edu/podcastdetail/8980, (Tue, May 14th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
![](/sites/default/files/styles/narrow_1x/public/feeds/bf/large.png.webp?itok=kmaKhout)
14 May 2024
Biztonsági szemle
Apple Patches Everything: macOS, iOS, iPadOS, watchOS, tvOS updated., (Tue, May 14th)
Apple today released updates for its various operating systems. The updates cover iOS, iPadOS, macOS, watchOS and tvOS. A standalone update for Safari was released for older versions of macOS. One already exploited vulnerability, CVE-2024-23296 is...
![](/sites/default/files/styles/narrow_1x/public/feeds/18/vulnerability_Elena11_shuttersock.jpg.webp?itok=z6MzmelD)
14 May 2024
Biztonsági szemle
Heartbleed: When Is It Good to Name a Vulnerability?
Ten years have passed since Heartbleed was first identified, but the security industry is still grappling with the question of branded vulnerabilities and naming vulnerabilities appropriately.
![Python website. Python is a high-level, interpreted, general-purpose programming language.](/sites/default/files/styles/narrow_1x/public/feeds/db/051314_python.jpg.webp?itok=dvSC9EbI)
14 May 2024
Biztonsági szemle
Malicious PyPI ‘requests’ fork hides backdoor in PNG file
The “requests-darwin-lite” package was downloaded more than 400 times before its removal.
![](/sites/default/files/styles/narrow_1x/public/feeds/fc/Black_noodles-ciaobucarest-Alamy.jpg.webp?itok=ruzJOTba)
13 May 2024
Biztonsági szemle
500 Victims In, Black Basta Reinvents With Novel Vishing Strategy
Ransomware groups have always created problems for their victims that only they could solve. Black Basta is taking that core idea in a creative, new direction.
Pagination
- Previous page ‹‹
- Page 160
- Next page ››