notification Archives | Cyberthreat Blog from Fortify24x7

DShield SIEM Docker Updates, (Wed, Sep 10th)

by Cyberthreat Blog | Sep 10, 2025 | SANS ISC Bulletins | 0 |

Since the last update [5], over the past few months I added several enhancements to DShield SIEM...

VU#974249: Elevated Privileges and Arbitrary Code Execution issues in Sunshine for Windows v2025.122.141614

by Cyberthreat Blog | Sep 10, 2025 | CERT-Vulnerabilities | 0 |

Overview Two local security vulnerabilities have been identified in Sunshine for Windows, version v2025.122.141614 (and likely prior versions). These issues could allow attackers to execute arbitrary code and escalate privileges...

Lab-Based Drug Checking Standards Needs Meeting

by Cyberthreat Blog | Sep 10, 2025 | NIST | 0 |

The Lab-Based Drug Checking Standards Meeting is a two-day event designed to bring together scientists involved in lab-based drug checking, specifically for public health applications. In this meeting we will discuss current...

Microsoft Patch Tuesday September 2025, (Tue, Sep 9th)

by Cyberthreat Blog | Sep 9, 2025 | SANS ISC Bulletins | 0 |

As part of its September patch Tuesday, Microsoft addressed 177 different vulnerabilities, 86 of which affect Microsoft products. None of the vulnerabilities has been exploited before today. Two of the vulnerabilities were...

VU#763183: Amp’ed RF BT-AP 111 Bluetooth access point lacks an authentication mechanism

by Cyberthreat Blog | Sep 9, 2025 | CERT-Vulnerabilities | 0 |

Overview The Amp’ed RF BT-AP 111 Bluetooth Access Point exposes an HTTP-based administrative interface without authentication controls. This allows an unauthenticated remote attacker to gain full administrative access to the...

STPPA8: Special Topics on Privacy and Public Auditability — Event 8: Experimenting with Privacy-Enhancing Cryptography (PEC) Implementations

by Cyberthreat Blog | Sep 9, 2025 | NIST | 0 |

Event name: STPPA #8: Special Topics on Privacy and Public Auditability, Event 8 Date: September 18, 2025 Details and registration: https://csrc.nist.gov/events/2025/stppa8 Event theme: Experimenting with privacy-enhancing...

VU#461364: Hiawatha open-source web server has multiple vulnerabilities

by Cyberthreat Blog | Sep 8, 2025 | CERT-Vulnerabilities | 0 |

Overview Hiawatha is an open-source web server that supports Windows, MacOS X and a variety of Linux distributions. Hiawatha was focused on performance and is used in place of larger, more complex web servers. The fetch_request...

HTTP Request Signatures, (Mon, Sep 8th)

by Cyberthreat Blog | Sep 8, 2025 | SANS ISC Bulletins | 0 |

This weekend, I noticed three related headers being used in requests to some of our honeypots for the first time [1]: Signature-Input Signature-Agent Signature These headers are related to a relatively new feature, HTTP Message...

Forensic Science Standards Board (FSSB) Fall Quarterly Meeting

by Cyberthreat Blog | Sep 8, 2025 | NIST | 0 |

Forensic Science Standards Board (FSSB) fall quarterly meeting for members of the FSSB. Please note: This event is intended for members of the Forensic Science Standards Board only. To request registration consideration, please...

Scientific Exchange on Modeling and Simulation for Radiation Sterilization

by Cyberthreat Blog | Sep 7, 2025 | NIST | 0 |

Despite the growing potential of mathematical modeling and simulation to transform industrial radiation sterilization, widespread adoption remains limited. This stems not from technical constraints, but from a lack of shared...

CSF 2.0 Webinar Series: Deep-Dive into the CSF 2.0 Govern Function to Improve Cybersecurity

by Cyberthreat Blog | Sep 6, 2025 | NIST | 0 |

One of the major updates to CSF 2.0 is the creation of the Govern Function, highlighting the importance of ensuring cybersecurity capabilities support the broader mission through Enterprise Risk Management (ERM). Governance is...

From YARA Offsets to Virtual Addresses, (Fri, Sep 5th)

by Cyberthreat Blog | Sep 5, 2025 | SANS ISC Bulletins | 0 |

YARA is an excellent tool that most of you probably already know and use daily. If you...

Tag: notification