Technical Advisory: Pulse Connect Secure – RCE via Uncontrolled Gzip Extraction (CVE-2020-8260)
Vendor: Pulse SecureVendor URL: https://www.pulsesecure.net/Versions affected: Pulse Connect Secure (PCS) 9.1Rx or belowSystems Affected: Pulse Connect Secure (PCS) AppliancesCVE Identifier: CVE-2020-8260Advisory URL: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601Risk: 7.2 High CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HAuthors:Richard Warren - richard.warrennccgroupcomDavid...
Technical Advisory: Pulse Connect Secure – Arbitrary File Read via Logon Message (CVE-2020-8255)
Vendor: Pulse Secure
Vendor URL: https://www.pulsesecure.net/
Versions affected: Pulse Connect Secure (PCS) 9.1Rx or below
Systems Affected: Pulse Connect Secure (PCS) Appliances
CVE Identifier: CVE-2020-8255
Advisory URL: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601
Risk: 4.9 Medium CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Authors:
Richard Warren - richard.warrennccgroupcom
David...
The Cyberbunker Trial Began This Week
The Cyberbunker trial began this week. Eight defendants are facing charges for “aiding and abetting criminals in some 249,000 illegal online transactions involving drugs, contract killings, money laundering and...
Microsoft’s Kubernetes Threat Matrix: Here’s What’s Missing
With a fuller picture of the Kubernetes threat matrix, security teams can begin to implement mitigation strategies to protect their cluster from threats.The MITRE ATT&CK threat matrix is a valuable...
Data breach at Finnish psychotherapy center takes a darker turn with extortion attempts
Written by Joe Warminsky Oct 26, 2020 |...
Microsoft quietly prepares to avoid spotlight under Biden
Microsoft Corp, which has largely evaded Washington’s scrutiny of Big Tech companies and scored a lucrative $10 billion government contract under the Trump administration, has emerged as a significant...
China launches crackdown on mobile web browser ‘chaos’
China’s top cyber authority said on Monday it would carry out a “rectification” of Chinese mobile internet browsers to address what it called social concerns over the “chaos” of...
Austrian Man Arrested for Reselling Amphetamines from the Darkweb
The Upper Austria State Police Directorate announced the arrest of a man suspected of importing and reselling drugs he purchased on the darkweb.According to the announcement, the 20-year-old man...
Treasury sanctions Russian research institute for Triton attack
By:
Teri Robinson
The Treasury Department’s Office of Foreign Assets Control sanctioned a Russian government research institution linked...
