Dell has patched a path-traversal vulnerability in the remote management web interface for its latest PowerEdge servers The iDRAC controller is a Linux computer within the PowerEdge server which is used to remotely manage the host server – even when the host itself is powered down. According to Dell’s security advisory: Dell EMC iDRAC9 versions […]
DELL patches iDRAC vulnerability Read More »
Mozilla has suspended the new Firefox Send service just four months after in launched, due to criminals increasingly using it as a malware delivery platform. When it was launched, Firefox Send allowed files of up to 1Gb to be shared for free without needing to login or create an account. In a statement Mozilla advises:
Mozilla Suspends Firefox Send service Read More »
Tsunami is a security vulnerability scanner designed for very large networks – originally created by Google for scanning their own huge network. Google has now released Tsunami as an open source project – it is under active development and users are warned to expect significant changes in future releases. Security Managers responsible for very large
What is the Tsunami security scanner? Read More »
Microsoft has released a patch to resolve a critical remote code execution vulnerability that has lived in the DNS server code for 17 years. A blog post from the Microsoft Security Response Centre states: Today we released an update for CVE-2020-1350, a Critical Remote Code Execution (RCE) vulnerability in Windows DNS Server that is classified as a ‘wormable’ vulnerability and has a CVSS base score of 10.0. This issue results from a flaw
Critical Microsoft DNS RCE Vulnerability Read More »
The July patch bundle from SAP includes a critical patch to resolve a vulnerability in the NetWeaver application server which could allow an unauthenticated attacker to gain unrestricted access to the SAP environment and database. According to the description for the vulnerability recorded as CVE CVE-2020-6287 : SAP NetWeaver AS JAVA (LM Configuration Wizard), versions
Critical SAP Vulnerability Patched Read More »
Mozilla and Google have confirmed they will be aligning with Apple and their browsers will reject any web server certificate issued after 1st September which is valid for more than a year. Apple announced the move to only support 1 year certificates back in February and now Mozilla and Google (and thus all the Chromium
Server certificates valid for 13 months from September Read More »
For 20 years a small two person firm in Ohio has licensed their TCP/IP software stack for use in embedded systems and IoT devices – from printers to medical devices. In June a collection of 19 vulnerabilities in this software was disclosed – affecting millions of devices from 50 different vendors. The collection of vulnerabilities
Ripple20 vulnerability affects millions of devices Read More »
A Zero-Day Remote Code Execution vulnerability affects 79 different Netgear routers With the significant increase in home-working due to the COVID pandemic, the security of home workers’ connectivity is under scrutiny. Security researchers have detailed a serious vulnerability in the firmware of many Netgear routers popular in small and home office set-ups. The vulnerability exists
Netgear SOHO Router Vulnerabilities Read More »
Amazon Web Services has revealed that in May 2020 it deflected the largest ever recorded DDoS attack. The previous largest Distributed Denial of Service (DDoS) attack had been against GitHub in 2018 which was measured at 1.3 Terabits (Thousand Billion bits per second) – the attack against AWS in May was almost double at 2.3
AWS deflects largest every DDoS Read More »
Security software provider LastPass has published their third Annual Global Password Security Report which reveals the extent of password reuse. LastPass has analysed the anonymised data and usage patterns of their enterprise password vault used by 47,000 organisations around the world. Some key data points from the report: For Businesses under 25 employees the average
LastPass study reveals extent of password reuse Read More »
SecureTeam Ltd,
Kemp House, 152 City Road,
London,
EC1V 2NX
10257784
GB 249480968
SecureTeam Ltd, Kemp House, 152 City Road,
London, EC1V 2NX
Mon – Fri: 09:00 – 17:00
Company Number: 10257784
VAT Registration No: GB 249480968
© SecureTeam 2023. All rights reserved.