An Azure Active Directory (AAD) misconfiguration leading to Bing.com compromise earned Wiz researchers a $40,000 bug bounty reward.
The post Microsoft Cloud Vulnerability Led to Bing Search Hijacking, Exposure of Office 365 Data appeared first on SecurityWeek.
A new research report discusses the five most exploited vulnerabilities of 2022, and the five key risks that security teams should consider.
The post Most Weaponized Vulnerabilities of 2022 and 5 Key Risks: Report appeared first on SecurityWeek.
A vulnerability in Google Pixel phones allows for the recovery of an original, unedited screenshot from the cropped version.
The post Google Pixel Vulnerability Allows Recovery of Cropped Screenshots appeared first on SecurityWeek.
SAP has released 19 new notes on March 2023 Security Patch Day, including five notes rated hot news.
The post SAP Releases Five ‘Hot News’ Notes on March 2023 Patch Day appeared first on SecurityWeek.
Reports published by various industrial cybersecurity companies provide different numbers on ICS vulnerabilities — here’s why.
The post Counting ICS Vulnerabilities: Examining Variations in Numbers Reported by Security Firms appeared first on SecurityWeek.
Researchers discover a dozen serious vulnerabilities in Akuvox smart intercom, but the vendor has not released any patches.
The post Unpatched Akuvox Smart Intercom Vulnerabilities Can Be Exploited for Spying appeared first on SecurityWeek.
A serious vulnerability in Veeam Backup & Replication may allow attackers to obtain encrypted credentials from the configuration database.
The post Serious Vulnerability Patched in Veeam Data Backup Solution appeared first on SecurityWeek.
Booking.com recently patched several vulnerabilities that could have been exploited to take control of a user’s account.
The post Critical Vulnerabilities Allowed Booking.com Account Takeover appeared first on SecurityWeek.
Endor Labs has introduced an OWASP-style listing of the most important or impactful risks inherent in the use of open source software (OSS).
The post Top 10 Security, Operational Risks From Open Source Code appeared first on SecurityWeek.
Fortinet provides clarifications following ‘sensationalized reports’ related to exploitation attempts targeting the FortiNAC vulnerability CVE-2022-39952
The post Fortinet Shares Clarifications on Exploitation of FortiNAC Vulnerability appeared first on SecurityWeek.
