CVE-2021-27461
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs.
Similar Posts
North Korean Group Targets Security Researchers
Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Malware as-a-Service Google: Attackers Leverage Social Media Accounts Akshaya Asokan (asokan_akshaya) • April 2, 2021 Screenshot of the fake “SecuriElite” website (Source: Google TAG) A North Korean government-backed threat group that was detected targeting security researchers in January is once again staging a…
PHP’s Git server compromised to plant backdoors in PHP source code
An unknown malicious actor has compromised the official PHP Git repository in attempt to add backdoors to the code base of the PHP project. According to PHP programming language developer and maintainer Nikita Popov, the incident took place last Saturday, on March 28. He said that two malicious commits were pushed to the…
CISA’s Easterly Unveils Joint Cyber Defense Collaborative
3rd Party Risk Management , Business Continuity Management / Disaster Recovery , Fraud Management & Cybercrime Newly Appointed Director Describes Effort to Build National Cybersecurity Defense Strategy Scott Ferguson (Ferguson_Writes) • August 5, 2021 CISA Director Jen Easterly makes a virtual presentation at Black Hat 2021. The U.S. Cybersecurity and Infrastructure Security Agency…
Solarwinds blamed intern for weak password – experts have doubts
SolarWinds told Congress that using the password ‘solarwinds123’ was an intern’s mistake. A key researcher told Insider the log-in information was posted publicly on GitHub for years. Cybersecurity experts say the issue appears to represent more than an intern’s weak password. Visit the Business section of Insider for more stories. Two SolarWinds CEOs told the…
EXCLUSIVE Microsoft warns thousands of cloud customers of exposed databases
SAN FRANCISCO, Aug 26 (Reuters) – Microsoft (MSFT.O) on Thursday warned thousands of its cloud computing customers, including some of the world’s largest companies, that intruders could have the ability to read, change or even delete their main databases, according to a copy of the email and a cyber security researcher. The vulnerability is in…
‘No Damage Was Done’ From Biden’s Trip to Europe
Chris Christie says that “not much was accomplished, but no damage was done” during Biden’s trip. The G-7, NATO, and Geneva summits were Biden’s first international meetings since taking office. While in Geneva, Biden had a long-awaited meeting with Russian President Vladimir Putin. Sign up for the 10 Things in Politics daily newsletter. Former GOP…