CISA adds Oracle, SugarCRM bugs to its Known Exploited Vulnerabilities Catalog

GlobalDefenseBot 4 February

2 minutes

US CISA added actively exploited vulnerabilities in SugarCRM and Oracle products to its Known Exploited Vulnerabilities Catalog. The Cybersecurity and Infrastructure Security Agency (CISA) added Oracle and SugarCRM flaws, respectively tracked as CVE-2022-21587 and CVE-2023-22952, to its Known Exploited Vulnerabilities Catalog. The CVE-2022-21587 flaw (CVSS score 9.8) affects the Oracle E-Business Suite, which is a set […]

The post CISA adds Oracle, SugarCRM bugs to its Known Exploited Vulnerabilities Catalog appeared first on Security Affairs.

Googling for Software Downloads Is Extra Risky Right Now

CySecBot 4 February

1 minute

Plus: The FTC cracks down on GoodRx, Microsoft boots “verified” phishing scammers, researchers disclose EV charger vulnerabilities, and more.

Senior intel police officer dies of wounds following clashes with smugglers in W Iran

CySecBot 4 February

1 minute

A senior Iranian intelligence police officer succumbs to the injuries sustained in clashes months earlier with drug traffickers in Iran’s western province of Kermanshah, which borders Iraq.

Gov Threatens Jail for Dangerously Diseased Americans Refusing Treatment

CySecBot 4 February

1 minute

Everyone probably knows what happens if you don’t quarantine tuberculosis, which is why laws were written to detain it. …over the past year, the health department has repeatedly sought and been granted court orders compelling the woman to i…

Russia says top Iranian security official to visit Moscow within days

CySecBot 4 February

1 minute

Secretary of Iran’s Supreme National Security Council Ali Shamkhani will visit Russia next week for consultations on Afghanistan, Russian special presidential envoy for Afghanistan Zamir Kabulov has said.

Onenote Malware: Classification and Personal Notes

CySecBot 4 February

11 minutes

During the past 4 months Microsoft Onenote file format has been (ab)used as Malware carrier by different criminal groups. While the main infection vector is still on eMail side – so nothing really relevant to write on – the used techniques, the templates and the implemented code to inoculate Malware changed a lot. So it […]

India’s Largest Truck Brokerage Company Leaking 140GB of Data

CySecBot 4 February

1 minute

By Waqas
The cause of the data leak is an ongoing server misconfiguration, identified by researchers on Shodan, the search engine for IoT devices.
This is a post from HackRead.com Read the original post: India’s Largest Truck Brokerage Company Le…

The Chinese Spy Balloon Shows the Downsides of Spy Balloons

CySecBot 4 February

1 minute

A popular military tool during the Cold War, spy balloons have since fallen out of favor—for good reason.

Tesla Asleep at the Wheel

CySecBot 4 February

1 minute

Tesla has been charged multiple times with engineering design failures related to their driver alertness system. These failures are implicated in sky rocketing Tesla deaths. And so in 2023 here’s yet more proof that the company, some would argue …

breaking news

Exploitation attempts for Oracle E-Business Suite flaw observed after PoC release

GlobalDefenseBot 3 February

2 minutes

Threat actors started exploiting a critical Oracle E-Business Suite flaw, tracked as CVE-2022-21587, shortly after a PoC was published. Shadowserver researchers warn that threat actors have started attempting to exploit critical Oracle E-Business Suite flaw (CVE-2022-21587) shortly after a PoC was published. The E-Business Suite is a set of enterprise applications that allows organizations automate […]

The post Exploitation attempts for Oracle E-Business Suite flaw observed after PoC release appeared first on Security Affairs.