Tag: vulnerability

5913 Mass Metrology Seminar

by Cyberthreat Blog | May 1, 2024 | NIST | 0 |

LinkedIn The Mass Metrology Seminar is a two-week, “hands-on” seminar. It incorporates approximately 30 percent lectures and 70 percent demonstrations and laboratory work in which the participant performs...

Take A Tour! NIST Cybersecurity Framework 2.0: Small Business Quick Start Guide

by Cyberthreat Blog | May 1, 2024 | NIST | 0 |

The U.S. Small Business Administration is celebrating National Small Business Week from April 28 – May 4, 2024. This week recognizes and celebrates the small business community’s significant contributions to the nation....

Linux Trojan – Xorddos with Filename eyshcjdmzg, (Mon, Apr 29th)

by Cyberthreat Blog | Apr 30, 2024 | SANS ISC Bulletins | 0 |

LinkedIn I reviewed a filename I see regularly uploaded to my DShield sensor eyshcjdmzg that have...

VU#163057: BMC software fails to validate IPMI session.

by Cyberthreat Blog | Apr 30, 2024 | CERT-Vulnerabilities | 0 |

Overview The Intelligent Platform Management Interface (IPMI) implementations in multiple manufacturer’s Baseboard Management Controller (BMC) software are vulnerable to IPMI session hijacking. An attacker with access to...

Another Day, Another NAS: Attacks against Zyxel NAS326 devices CVE-2023-4473, CVE-2023-4474, (Tue, Apr 30th)

by Cyberthreat Blog | Apr 30, 2024 | SANS ISC Bulletins | 0 |

Yesterday, I talked about attacks against a relatively recent D-Link NAS vulnerability. Today, scanning my honeypot logs, I found an odd URL that I didn’t recognize. The vulnerability is a bit older but turns out to be...

VU#238194: R Programming Language implementations are vulnerable to arbitrary code execution during deserialization of .rds and .rdx files

by Cyberthreat Blog | Apr 29, 2024 | CERT-Vulnerabilities | 0 |

Overview A vulnerability in the R language that allows for arbitrary code to be executed directly after the deserialization of untrusted data has been discovered. This vulnerability can be exploited through RDS (R Data...

D-Link NAS Device Backdoor Abused, (Mon, Apr 29th)

by Cyberthreat Blog | Apr 29, 2024 | SANS ISC Bulletins | 0 |

End of March, NetworkSecurityFish disclosed a vulnerability in various D-Link NAS devices [1]. The...

PMT Evaluation Process Overview

by Cyberthreat Blog | Apr 27, 2024 | NIST | 0 |

Over the past two months, the CHIPS Program Office (CPO) has announced preliminary memorandum of terms (PMTs) with 7 applicants totaling nearly $29 billion as part of the CHIPS and Science Act to revitalize American...

CHIPS for America and SelectUSA: Resources for Supporting International Business Attraction in the Semiconductor Industry

by Cyberthreat Blog | Apr 25, 2024 | NIST | 0 |

In partnership with SelectUSA, CHIPS for America will host a webinar focused on how economic development organizations can support international businesses in the semiconductor industry new to or unfamiliar with operating in the...