Month: octubre 2022

OpenSSL vulnerability - Pending Critical Disclosure (November 1) Security Advisory Security Advisory Description The OpenSSL organization will release a critical OpenSSL disclosure on November 1, ... More info: https://support.f5.com/csp/article/K44030142?utm_source=f5support&utm_medium=RSS

ShadowPad is a modular malware platform privately shared with multiple PRC-linked threat actors since 2015. According to SentinelOne, ShadowPad is highly likely the successor to PlugX. Due to its prevalence in the cyber espionage field, the VMware Threat Analysis Unit (TAU) was motivated to analyze the command and control (C2) protocol to discover active ShadowPad … ContinuedThe post Threat Analysis: Active C2 Discovery Using Protocol Emulation Part3 (ShadowPad) appeared first on VMware More info: https://blogs.vmware.com/security/2022/10/threat-analysis-active-c2-discovery-using-protocol-emulation-part3-shadowpad.html?utm_source=rss&utm_medium=rss&utm_campaign=threat-analysis-active-c2-discovery-using-protocol-emulation-part3-shadowpad

Apache Shiro vulnerability CVE-2022-40664 Security Advisory Security Advisory Description Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via ... More info: https://support.f5.com/csp/article/K30671731?utm_source=f5support&utm_medium=RSS

Intel Processor vulnerability CVE-2021-33149 Security Advisory Security Advisory Description Observable behavioral discrepancy in some Intel(R) Processors may allow an authorized user to ... More info: https://support.f5.com/csp/article/K11601010?utm_source=f5support&utm_medium=RSS

In celebration of this year’s Cybersecurity Awareness Month theme – See Yourself in Cyber – we are spotlighting VMware security pros to ask them five questions about their career path. Amelina Ishak is a detection and response analyst at VMware. Amelina’s current role on the DART team involves global security monitoring and investigation of suspicious … ContinuedThe post See Yourself in Cyber: 5 Questions with Amelina Ishak appeared first on VMware Security Blog. More info: https://blogs.vmware.com/security/2022/10/see-yourself-in-cyber-5-questions-with-amelina-ishak.html?utm_source=rss&utm_medium=rss&utm_campaign=see-yourself-in-cyber-5-questions-with-amelina-ishak

Apache mod_auth_openidc vulnerabilities CVE-2021-32785 CVE-2021-32786 CVE-2021-32792 Security Advisory Security Advisory Description CVE-2021-32785 mod_auth_openidc is an authentication/ ... More info: https://support.f5.com/csp/article/K41454238?utm_source=f5support&utm_medium=RSS

OpenJDK vulnerability CVE-2020-14796, CVE-2020-14798, CVE-2020-14803 Security Advisory Security Advisory Description CVE-2020-14796 Vulnerability in the Java SE, Java SE Embedded product of Oracle ... More info: https://support.f5.com/csp/article/K45012029?utm_source=f5support&utm_medium=RSS

OpenSSH vulnerability CVE-2016-20012 Security Advisory Security Advisory Description ** DISPUTED ** OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of ... More info: https://support.f5.com/csp/article/K31902105?utm_source=f5support&utm_medium=RSS

Apache Kylin vulnerability CVE-2022-24697 Security Advisory Security Advisory Description Kylins cube designer function has a command injection vulnerability when overwriting system parameters in ... More info: https://support.f5.com/csp/article/K13249530?utm_source=f5support&utm_medium=RSS

Linux kernel vulnerability CVE-2019-25045 Security Advisory Security Advisory Description An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, ... More info: https://support.f5.com/csp/article/K20176943?utm_source=f5support&utm_medium=RSS