CVE-2021-22354 – Alert Detail – Security Database

United States trucks and military vehicles maker Navistar International Corporation has confirmed a cyberattack that resulted in some data being stolen. On Monday, in a Form 8-K filing with the Securities and Exchange Commission (SEC), Navistar said it learned of a credible potential cybersecurity threat to its information technology system on May 20, 2021. Navistar…

Malaysia Airlines suffers data security ‘incident’ spanning nine years | IT Security News Latest topics for ZDNet in Security 2. March 2021 Security breach compromises personal data of the airline’s frequent flyer programme Enrich, including members’ contact details and date of birth, and reportedly involved a third-party IT service provider in an “incident” stretching June…

More than 533 million Facebook users had their personal information posted to a public hacker forum, a move that is raising concerns about an uptick in cybercrime leveraging the credentials. The publicly released Facebook user data is believed to be part of a 2019 “Add Friend” Facebook security bug exploited by hackers at the time.

This is a Writeup of Tryhackme room “Baron samedit” https://tryhackme.com/room/sudovulnssamedit Room link: https://tryhackme.com/room/sudovulnssameditNote: This room is free In January 2021, Qualys released a blog post detailing a terrifying new vulnerability in the Unix sudo program. Specifically, this was a heap buffer overflow allowing any user to escalate privileges to root — no misconfigurations required. This…

Multiple cyber threat actors, including ransomware operators and nation state hackers, have been exploiting a recently patched Windows MSHTML vulnerability as part of initial access campaigns that deployed custom Cobalt Strike Beacon loaders, Microsoft Threat Intelligence Center (MSTIC) said in a new report detailing the attacks. The vulnerability in question is an improper input validation…

Business Continuity Management / Disaster Recovery , Fraud Management & Cybercrime , Governance & Risk Management Acting CISA Director Tells Lawmakers FBI, Not Company, Alerted Agency Scott Ferguson (Ferguson_Writes) • May 11, 2021     Acting CISA Director Brandon Wales testifying before the Senate Homeland Security and Governmental Affairs Committee The Cybersecurity and Infrastructure Security…