2022 VMware Threat Report – Exposing Malware in Linux-Based Multi-Cloud Environments

In the past five years, Linux has become the most common operating system (OS) in multi-cloud environments and powers more than 78 percent of the most popular websites. Malicious actors have taken notice and are increasingly targeting vulnerable Linux-based systems in multi-cloud environments to infiltrate corporate and government networks. These threats take advantage of weak The post 2022 VMware Threat Report – Exposing Malware in Linux-Based Multi-Cloud Environments appeared first on More info: https://blogs.vmware.com/security/2022/02/2022-vmware-threat-report-exposing-malware-in-linux-based-multi-cloud-environments.html?utm_source=rss&utm_medium=rss&utm_campaign=2022-vmware-threat-report-exposing-malware-in-linux-based-multi-cloud-environments

Digital Brand Protection in an Era of Cloud Jacking

In a multi-cloud world, cyberattacks are burgeoning. According to the FBI, cybercrime increased by 300% in 2021. The World Economic Forum stated that cyberattacks are one of the most significant risks posed to corporations in their annual risk index. Cyber cartels are hijacking the digital transformation of corporations and escalating intrusions by leveraging destructive attacks The post Digital Brand Protection in an Era of Cloud Jacking appeared first on VMware Security Blog. More info: https://blogs.vmware.com/security/2022/02/digital-brand-protection-in-an-era-of-cloud-jacking.html?utm_source=rss&utm_medium=rss&utm_campaign=digital-brand-protection-in-an-era-of-cloud-jacking

Drupal core – Moderately critical – Information disclosure – SA-CORE-2022-004

Project: Drupal coreDate: 2022-February-16Security risk: Moderately critical 12∕25 AC:None/A:User/CI:Some/II:None/E:Theoretical/TD:DefaultVulnerability: Information disclosureCVE IDs: CVE-2022-25270Description: The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access.Sites are only affected if the QuickEdit module (which More info: https://www.drupal.org/sa-core-2022-004

Drupal core – Moderately critical – Information disclosure – SA-CORE-2022-004

Project: Drupal coreDate: 2022-February-16Security risk: Moderately critical 12∕25 AC:None/A:User/CI:Some/II:None/E:Theoretical/TD:DefaultVulnerability: Information disclosureCVE IDs: CVE-2022-25270Description: The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access.Sites are only affected if the QuickEdit module (which More info: https://www.drupal.org/sa-core-2022-004

Drupal core – Moderately critical – Improper input validation – SA-CORE-2022-003

Project: Drupal coreDate: 2022-February-16Security risk: Moderately critical 14∕25 AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:UncommonVulnerability: Improper input validationCVE IDs: CVE-2022-25271Description: Drupal cores form API has a vulnerability where certain contributed or custom modules forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an More info: https://www.drupal.org/sa-core-2022-003
Translate »