![]() |
Description: Posted by Apple Product Security via Fulldisclosure on Jan 27APPLE-SA-01-27-2025-8 tvOS 18.3
tvOS 18.3 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/122072.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
AirPlay
Available for: Apple TV HD and Apple TV 4K (all models)
Impact: An attacker on the local network may be able to cause unexpected...
January 28th, 2025 (5 months ago)
|
![]() |
Description: Posted by Apple Product Security via Fulldisclosure on Jan 27APPLE-SA-01-27-2025-9 Safari 18.3
Safari 18.3 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/122074.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Passwords
Available for: macOS Ventura and macOS Sonoma
Impact: A malicious app may be able to bypass browser extension
authentication...
January 28th, 2025 (5 months ago)
|
![]() |
Description: PowerSchool has begun notifying impacted individuals about a data breach that compromised personal information from its Student Information System (SIS). The breach, first detected on December 28, 2024, resulted in the unauthorized exfiltration of data, including names, contact details, Social Security numbers (SSNs), medical alerts, and academic records for certain individuals. The total number of …
The post PowerSchool Notifies Students and Educators of Major Data Breach appeared first on CyberInsider.
January 28th, 2025 (5 months ago)
|
![]() |
Description: In June 2021, the (now defunct) gaming website HeatGames suffered a data breach that was later redistributed as part of a larger corpus of data. The breach exposed almost 650k unique email addresses along with IP addresses, country and salted MD5 password hashes.
January 28th, 2025 (5 months ago)
|
![]() |
Description: A new NCSC research paper aims to reduce the presence of ‘unforgivable’ vulnerabilities.
January 28th, 2025 (5 months ago)
|
![]() |
Description: Research from the NCSC designed to eradicate vulnerability classes and make the top-level mitigations easier to implement.
January 28th, 2025 (5 months ago)
|
![]() |
Description: Signal is rolling out a new feature that allows users to transfer their message history when linking their primary device to a new desktop or iPad. Previously, only new messages would sync to linked devices, but now users can bring their chats and up to 45 days of media along with them — all while …
The post Signal Adds Encrypting Message History Sync for Linked Devices appeared first on CyberInsider.
January 28th, 2025 (5 months ago)
|
![]() |
January 28th, 2025 (5 months ago)
|
CVE-2024-55591 |
Description: Rapid7 is responding to two separate events affecting Fortinet firewall customers: Zero-day exploitation of CVE-2024-55591 in FortiOS, and a large-scale data leak of older FortiGate firewall IPs, passwords, and configs.
EPSS Score: 2.63%
January 28th, 2025 (5 months ago)
|
CVE-2024-20342 |
Description:
Multiple Cisco products are affected by a vulnerability in the rate filtering feature of the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured rate limiting filter. <br><br>
This vulnerability is due to an incorrect connection count comparison. An attacker could exploit this vulnerability by sending traffic through an affected device at a rate that exceeds a configured rate filter. A successful exploit could allow the attacker to successfully bypass the rate filter. This could allow unintended traffic to enter the network protected by the affected device.<br><br>
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.<br><br>
This advisory is available at the following link:<br><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-rf-bypass-OY8f3pnM">https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-rf-bypass-OY8f3pnM</a><br><br>
This advisory is part of the October 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see <a href="https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75300">Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication</a>.<br><br>
<br/...
January 28th, 2025 (5 months ago)
|