Guess what? You should patch Exim again!

Hot on the heels of a patch for a critical RCE Exim flaw comes another one that fixes a denial of service (DoS) condition (CVE-2019-16928) that could also be exploited by attackers to pull off remote code execution. With no mitigations available at thi… Continue reading Guess what? You should patch Exim again!

BMC vulnerabilities in Supermicro servers allow remote takeover, data exfiltration attacks

A slew of vulnerabilities affecting the baseboard management controllers (BMCs) of Supermicro servers could be exploited by remote attackers to gain access to corporate networks, Eclypsium researchers have discovered. The flaws, collectively dubbed USB… Continue reading BMC vulnerabilities in Supermicro servers allow remote takeover, data exfiltration attacks

‘USBAnywhere’ Bugs Open Supermicro Servers to Remote Attackers

Trivial-to-exploit authentication flaws can give an unsophisticated remote attacker ‘omnipotent’ control over a server and its contents. Continue reading ‘USBAnywhere’ Bugs Open Supermicro Servers to Remote Attackers

Cisco warns about public exploit code for critical flaws in its 220 Series smart switches

Cisco has fixed over 30 vulnerabilities in various solutions, including Cisco UCS Director, Cisco UCS Director Express for Big Data, Cisco IMC Supervisor, and the Cisco 220 Series smart switches. Updates by product Users of Cisco UCS Director and Cisco… Continue reading Cisco warns about public exploit code for critical flaws in its 220 Series smart switches

Scientists developing self-organizing migration of services with sovereignty over proprietary data

Developing a self-organizing migration of services is the core idea of the team headed by Magdeburg project leader, Professor Dr. Mesut Güne. This means that the services – such as home automation, data management, and business logic – no l… Continue reading Scientists developing self-organizing migration of services with sovereignty over proprietary data

Migrations represent the number one challenge for database professionals

Migrations are now the number one priority for database professionals, a new Redgate report reveals. Cloud usage is on the up, for example, with 44% of organizations now using SQL Server on VMs in Azure, Amazon and the Google Cloud at least some of the… Continue reading Migrations represent the number one challenge for database professionals

Vendor revenue in the worldwide server market increased to $19.8 billion in Q1 2019

Vendor revenue in the worldwide server market increased 4.4% year over year to $19.8 billion during the first quarter of 2019 (1Q19). Worldwide server shipments declined 5.1% year over year to just under 2.6 million units in 1Q19, according to the IDC … Continue reading Vendor revenue in the worldwide server market increased to $19.8 billion in Q1 2019

Scientists may have identified a new way to improve network security

With cybersecurity one of the nation’s top security concerns and billions of people affected by breaches last year, government and businesses are spending more time and money defending against it. Researchers at the U.S. Army Combat Capabilities … Continue reading Scientists may have identified a new way to improve network security

Unsecured Gearbest server exposes millions of shoppers and their orders

Chinese e-commerce giant Gearbest has exposed information and orders of millions of its customers through an unsecured Elasticsearch server, security researcher Noam Rotem and his team have found. What kind of data was exposed? According to Rotem, the … Continue reading Unsecured Gearbest server exposes millions of shoppers and their orders

Watch X, macOS, & Fraudsters – Hack Naked News #207

    This week, your Lenovo X is watching you & sharing information, a client-side DNS attack emerges from academic research, a macOS vulnerability leaks safari data, hackers hit VFEmail & wipe US servers and backups, and a check-in system flaw … Continue reading Watch X, macOS, & Fraudsters – Hack Naked News #207