Tencent tdsqlpcloud <= 1.8.5 has a critical vulnerability (CVE-2023-52286) that exposes database credentials to unauthenticated attackers.
#cybersecurity#infosec#tdsqlpcloud#tencent#cve
CVE-2023-52135: A medium-severity vulnerability in WS Form LITE for WordPress that allows SQL injection attacks. Update to version 1.9.8 or later.
#cybersecurity#infosec#wordpress#vulnerability
CVE-2023-52174 and CVE-2023-52173: Two low-severity vulnerabilities in XnView Classic on Windows that cause crashes. Update to version 2.51.3 or later. #cybersecurity#infosec#xnview#vulnerability
CVE-2023-52240: A high-severity vulnerability in Kantega SSO apps for Atlassian products that allows XSS attacks. Update to version 6.20.0 or disable SAML POST Binding.
#cybersecurity#infosec#atlassian#vulnerability
Nashua School District hit by a sophisticated cyberattack on Sunday, but classes will go on as scheduled Monday. The district is working to investigate and restore its systems.
#Nashua#cyberattack#schools#education#security
Did you know that Netflix uses FreeBSD to deliver its content to you? Learn how they built their own CDN with open source software and achieved 400Gb/s encryption speed.
https://t.co/CVBO1ZUjHU
#Netflix#FreeBSD#CDN#kTLS#OpenSource
[8/8] The paper is available online at https://t.co/QsASjEo2kK. If you are interested in learning more about Screaming Channels and other attacks, you can follow us on Twitter.
[1/8] Your wireless devices can betray you with electromagnetic waves. A 2018 paper reveals a novel attack that exploits the radio transceivers of IoT devices.
#screaming#channels#iot
[7/8] The paper is titled “Screaming Channels: When Electromagnetic Side Channels Meet Radio Transceivers” and it was presented at the ACM Conference on Computer and Communications Security (CCS) 2018.
#paper#title#conference#authors#affiliations#experts
Hackers claim to have breached Western Digital’s systems and gained access to customer data, firmware updates and source code. The company says it is investigating the incident and has not confirmed any compromise.
https://t.co/Ya3WBm8uib
#WesternDigital#DataBreach
[10/10] TEMPEST is one of the most secretive and mysterious projects in the history of cryptography and intelligence. It has been the subject of many rumors, myths, and speculations. It has also inspired many researchers & hackers to explore the hidden world of electromagnetics.
[1/10] TEMPEST is a codename for a secret project that deals with detecting and preventing electromagnetic leaks from electronic devices. It was started by the US government during World War II. #TEMPEST#NSA#EMSEC#WWII#Crypto
[2/10] The origin of TEMPEST can be traced back to 1943, when a #Bell engineer named Van Eck noticed that he could pick up the keystrokes of a typewriter across the street using a #radio receiver. He reported his discovery to the US #Army. #TEMPEST#NSA#EMSEC#WWII#Crypto