GnuTLS vulnerability CVE-2020-13777 Security Advisory Security Advisory Description GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of ...
More info:
https://support.f5.com/csp/article/K30446705?utm_source=f5support&utm_medium=RSS
The BIG-IP system may not interpret an HTTP request the same way the target web server interprets it Security Advisory Security Advisory Description This issue occurs when all of the following ...
More info:
https://support.f5.com/csp/article/K27551003?utm_source=f5support&utm_medium=RSS
Defiant, dba Wordfence, is now listed on the Privacy Shield certification list participating in both the EU-U.S. and Swiss-U.S. Privacy Shield frameworks. The purpose of these frameworks is to allow for the lawful transfer of personal data from the European Union and Switzerland to the United States. Two years ago when the General Data Protection […]
More info:
https://www.wordfence.com/blog/2020/06/defiant-participating-in-privacy-shield-framework/
This week, we look at some targeted phishing attacks that are bypassing Microsoft Outlook’s protective filters, and phishing campaigns using calendar invitations to target unsuspecting recipients. We also look at some successful bitcoin scams and a new record for a massive DDoS attack that targeted an AWS customer. Drupal pushes out some security fixes, and […]
More info:
https://www.wordfence.com/blog/2020/06/episode-78-targeted-phishing-bypassing-security-checks-and-a-new-ddos-record/
WordPress is popular for a reason. If your business site requires multiple people to log in, update content, change settings and collaborate, WordPress has you covered. Setting up a multi-user site has never been easier, but it does come at a cost. With a big team it’s easy to lose track of what everyone is […]
More info:
https://wpactivitylog.com/track-wordpress-user-login-history/
Multiple Trek TCP/IP stack vulnerabilities Security Advisory Security Advisory Description CVE-2020-11896 The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 ...
More info:
https://support.f5.com/csp/article/K17133899?utm_source=f5support&utm_medium=RSS
Intel SPI Flash vulnerability CVE-2017-5703 Security Advisory Security Advisory Description Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to ...
More info:
https://support.f5.com/csp/article/K19855851?utm_source=f5support&utm_medium=RSS
Intel AMT vulnerabilities CVE-2020-0531, CVE-2020-0532, and CVE-2020-0535 Security Advisory Security Advisory Description CVE-2020-0531 Improper input validation in Intel(R) AMT versions before 11 ...
More info:
https://support.f5.com/csp/article/K06015902?utm_source=f5support&utm_medium=RSS
BIND vulnerability CVE-2020-8619 Security Advisory Security Advisory Description The asterisk character ("*") is allowed in DNS zone files, where it is most commonly present as a wildcard at a ...
More info:
https://support.f5.com/csp/article/K19807532?utm_source=f5support&utm_medium=RSS
Intel CSME vulnerabilities CVE-2020-0533, CVE-2020-0534, CVE-2020-0536, and CVE-2020-0539 Security Advisory Security Advisory Description CVE-2020-0533 Reversible one-way hash in Intel(R) CSME ...
More info:
https://support.f5.com/csp/article/K50242910?utm_source=f5support&utm_medium=RSS