Wang Products :: Security News

Security Feeds

We are keeping track of 7 security feeds.

You can view/search our own security articles by clicking here

We are currently bringing you feeds from the following sites:

Related Links

Security: The Latest Security News

In this section you will find up to date security news (updated every hour) including vulnerability reports, advisories, and general security articles.

We obtain our news directly from multiple sources (see left hand panel for a full listing of sites) to ensure you do not miss any articles and always receive the latest breaking news.

Help Net Security - Advisories

Gentoo Linux Security Advisory - CEDET: Privilege escalation (GLSA 201401-31)
Gentoo Linux Security Advisory - Exim: Multiple vulnerabilities (GLSA 201401-32)
CentOS Errata and Security Advisory - Important CentOS 6 java-1.6.0-openjdk Update (CESA-2014:0097)
Ubuntu Security Notice - munin vulnerabilities (USN-2090-1)
CentOS Errata and Security Advisory - Important CentOS 5 java-1.6.0-openjdk Update (CESA-2014:0097)
SUSE Security Update - puppet (SUSE-SU-2014:0155-1)
Slackware Security Advisory - mozilla-nss (SSA:2014-028-02)
CentOS Errata and Security Advisory - Moderate CentOS 6 libvirt Update (CESA-2014:0103)
Slackware Security Advisory - bind (SSA:2014-028-01)
Gentoo Linux Security Advisory - Perl Digest-Base module: Arbitrary code execution (GLSA 201401-33)

Help Net Security - News

Facebook open-sources a static analyzer for Python code
Critical ManageEngine ADSelfService Plus RCE flaw patched
IRONSCALES raises $8M to support email security research and development, accelerate growth
Deep Instinct contracts with T-Systems to continue expansion into EMEA
Leading tech companies certify IoT devices via ioXt Alliance
MiniTool Power Data Recovery 9.0: Improved scanning speed and data recovery results
LitLingo raises $2M to expand its product and engineering teams, accelerate growth
CyberSaint CyberStrong updates make cybersecurity resiliency an enabler of business strategy
Securing human resources from cyber attack
10-point plan for securing employee health data collected for COVID-19 prevention

Help Net Security - Vulnerabilities

Adobe Flash Player Unspecified Code Execution Vulnerability (APSB14-04)
Oracle Fusion Middleware Reports Developer Unspecified Data Compromise Vulnerability
Apache Struts Wildcard Matching Code Execution Vulnerability
Apache Struts OGNL Expression TextParseUtil.translateVariables Code Execution Vulnerability
Microsoft Internet Explorer 8 CTreeNode Use-after-Free Memory Corruption Vulnerability
Apache Tomcat Manager Application Upload Authenticated Code Execution
Internet Explorer CMarkup use-after-free vulnerability
Adobe Flash Player 12.0.0.44 Memory Corruption Vulnerability
Linksys Multiple Routers tmUnblock.cgi Input Validation Error Vulnerability
Symantec Endpoint Protection Manager Remote Command Execution Exploit

SANS ISC

Powershell Bot with Multiple C2 Protocols, (Mon, Aug 3rd)
A Fork of the FTCode Powershell Ransomware, (Thu, Aug 6th)
ISC Stormcast For Thursday, August 6th 2020 https://isc.sans.edu/podcastdetail.html?id=7112, (Thu, Aug 6th)
TA551 (Shathak) Word docs push IcedID (Bokbot), (Fri, Aug 7th)
Scanning Activity Include Netcat Listener, (Sat, Aug 8th)
ISC Stormcast For Friday, August 7th 2020 https://isc.sans.edu/podcastdetail.html?id=7114, (Fri, Aug 7th)
Small Challenge: A Simple Word Maldoc - Part 2, (Sun, Aug 9th)
ISC Stormcast For Tuesday, August 11th 2020 https://isc.sans.edu/podcastdetail.html?id=7118, (Tue, Aug 11th)
ISC Stormcast For Monday, August 10th 2020 https://isc.sans.edu/podcastdetail.html?id=7116, (Mon, Aug 10th)
Scoping web application and web service penetration tests, (Mon, Aug 10th)

SecurityFocus - News

More rss feeds from SecurityFocus
Mark Rasch: Hacker-Tool Law Still Does Little
Mark Rasch: Lazy Workers May Be Deemed Hackers
Gunter Ollmann: Time to Squish SQL Injection
Infocus: WiMax: Just Another Security Challenge?
Infocus: Data Recovery on Linux and ext3
Infocus: Responding to a Brute Force SSH Attack
Infocus: Enterprise Intrusion Analysis, Part One
News: MS uses court order to take out Waledac botnet
News: Latvian hacker tweets hard on banking whistle
Brief: Attack on IE 0-day refined by researchers
Brief: Microsoft patches as fraudsters target IE flaw
Brief: Cyberattacks from U.S. "greatest concern"
Brief: Google offers bounty on browser bugs
News: Conficker data highlights infected networks
News: Change in Focus
News: Twitter attacker had proper credentials
News: PhotoDNA scans images for child abuse

SecurityFocus - Vulns

More rss feeds from SecurityFocus
Bugtraq: Cisco Unified Contact Center Express Privilege Escalation Vulnerability (CVE-2019-1888)
Bugtraq: Local information disclosure in OpenSMTPD (CVE-2020-8793)
Bugtraq: [SECURITY] [DSA 4633-1] curl security update
Vuln: KDE KAuth CVE-2017-8422 Local Privilege Escalation Vulnerability
Vuln: LibreOffice Remote Code Execution and Unauthorized Access Vulnerabilities
Vuln: Jenkins Credentials Binding Plugin CVE-2019-1010241 Information Disclosure Vulnerability
Vuln: Qualcomm Components CVE-2019-2307 Integer Underflow Vulnerability