article thumbnail

WinRAR Absolute Path Traversal Vulnerability Leads to Remote Code Execution (CVE-2018-20250)

Tenable

Possibly the first malware delivered through mail to exploit WinRAR vulnerability. dll, the DLL file used by WinRAR to parse ACE archives that has not been updated since 2005 (14 years ago). Join Tenable's Security Response Team on the Tenable Community. An exploit script was published to Github one day after CPR’s blog post.

Windows 40
article thumbnail

Broadcom Software & the U.S. Government: Partners on Cyber Defense

CIO

to meet with policymakers and government customers to talk about the future of cybersecurity. Broadcom Software solutions secure digital operations across the federal government, and our Global Intelligence Network (GIN) evaluates and shares insights on the ever-evolving cyber threat landscape with U.S.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

25 Feb Cloudera Federal Forum in Tysons Corner: Amazing agenda filled with lessons learned and best practices

CTOvision

Data Security—What’s New and What’s Next? Chief Security Architect, Office of the CTO, Cloudera. Security Spotlight: Focus on HIPAA and PCI Compliance. Chief Security Architect, Office of the CTO, Cloudera. Security and Compliance in the Era of Big Data. Chief Security Architect, Office of the CTO, Cloudera.

article thumbnail

Clickjacking 2017

Jeremiah Grossman

The future: Long standing Web application security scourges such SQL Injection (SQLi), Cross-Site Scripting (XSS), and Cross-Site Request Forgery (CSRF) are finally under control. A six year gap sparking the software security revolution. XSS experimentation began around 1997 with few appreciating its true power until 2005 (8 years).

Malware 40
article thumbnail

Join Architects, Planners, Program Managers, Data Scientists at 4th Annual Cloudera Federal Forum in DC 25 Feb

CTOvision

Data Security—What’s New and What’s Next? Chief Security Architect, Office of the CTO, Cloudera. Security Spotlight: Focus on HIPAA and PCI Compliance. Chief Security Architect, Office of the CTO, Cloudera. Security and Compliance in the Era of Big Data. Chief Security Architect, Office of the CTO, Cloudera.

article thumbnail

Into the Data Breach: Facts and Statistics You Should Know About

Apiumhub

They can also do it by remotely bypassing network security from a secure location off-premises. Cybercriminals probe the company looking for weaknesses in its security. Hackers usually befriend their targets on social media or dupe them into opening an attachment loaded with malware. The Exfiltration. billion in 2022.

Data 10
article thumbnail

Cyber Canon Book Review: Zero Day Threat: The Shocking Truth of How Banks and Credit Bureaus Help Cyber Crooks Steal Your Money and Identity

Palo Alto Networks

Bottom Line: I don’t recommend this book for the Cybersecurity Canon Hall of Fame, but if you are interested in the topic, this is a good one to read. Review: When I started focusing on cybersecurity back in the early 2000s, we faced a series of routine attacks like the Melissa virus, Love Bug and Anna Kournikova.