article thumbnail

'SinkClose' AMD CPU vulnerability explained: How dangerous is it really?

Collaboration 2.0

The flaw endangers essentially all - yes, all - AMD processors made since 2006, but it threatens servers, data centers, and clouds more than the PC in front of you. Here's what you need to know and what you can do about it.

IT 189
article thumbnail

OWASP discloses a data breach

Security Affairs

The incident impacted OWASP members from 2006 to around 2014 who provided their resumes as part of joining OWASP. “OWASP collected resumes as part of the early membership process, whereby members were required in the 2006 to 2014 era to show a connection to the OWASP community. “ I think I am affected.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

US CISA added 17 flaws to its Known Exploited Vulnerabilities Catalog

Security Affairs

CVE Number CVE Title Required Action Due Date CVE-2021-32648 October CMS Improper Authentication 2/1/2022 CVE-2021-21315 System Information Library for node.js Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, Known Exploited Vulnerabilities Catalog).

CMS 294
article thumbnail

Emissary Panda updated its weapons for attacks in the past 2 years

Security Affairs

In 2018, Emissary Panda was observed using an updated version of the ZxShell RAT first developed in 2006 and whom code was released in 2007. The malware includes the well-known HTran packet redirection tool and was signed with digital certificates that were signed by Hangzhou Shunwang Technology. . Windows NT 6.3; Pierluigi Paganini.

IT 253
article thumbnail

Threat actors offer for sale data for 50 millions of Moscow drivers

Security Affairs

Stolen data spans from 2006 and 2019, local media outlets have confirmed their authenticity. “The cybercriminals put up for sale for $ 800 a database of 50 million lines with the data of drivers that were registered in Moscow and the Moscow region from 2006 to 2019. ” reads the post published by the Kommersant website.

Sales 285
article thumbnail

Attacks against SolarWinds Serv-U SW were possible due to the lack of ASLR mitigation

Security Affairs

SolarWinds did not enable anti-exploit mitigation available since 2006 allowing threat actors to target SolarWinds Serv-U FTP software in July attacks. Software vendor SolarWinds did not enable ASLR anti-exploit mitigation that was available since the launch of Windows Vista in 2006, allowing the attackers to launch targeted attacks in July.

Libraries 328
article thumbnail

Critical unauthenticated remote code execution flaw in OpenSSH server

Security Affairs

The flaw was introduced with the fix for another vulnerability, tracked as CVE-2006-5051. Under lab conditions, the attack requires on average 6-8 hours of continuous connections up to the maximum the server will accept. Exploitation on 64-bit systems is believed to be possible but has not been demonstrated at this time.

Risk 348