Malwarebytes
OCTOBER 22, 2021
This would mean Network Time Protocol (NTP) servers using the broken GPSD versions would think it’s March 2002 instead of October 2021. Authentication mechanisms such as Time-based One-Time Password (TOTP) and Kerberos also rely heavily on time. The same would happen in cases where authentication relies on cookies.
Security Affairs
MARCH 4, 2022
The following two issues added by CISA to the catalog are very old, they are dated back 2002 and 2004 respectively: CVE-2002-0367 – Microsoft Windows Privilege Escalation Vulnerability: smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator (..)
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
The State of Security
MAY 5, 2022
In 2002 I sat in a local bookstore in Jackson Hole, WY that offered a few Internet-connected computers for hourly use. After chatting with the owner and petting the resident store dog, I took a few guesses at the password protecting these computers. It took me maybe 10 attempts. It was, of course, some variation […]… Read More.
Krebs on Security
DECEMBER 18, 2020
7, 2020, the NSA said “Russian state-sponsored malicious cyber actors are exploiting a vulnerability in VMware Access and VMware Identity Manager products, allowing the actors access to protected data and abusing federated authentication.” 3, and said it learned about the flaw from the NSA. ” Indeed, the NSA’s Dec.
Security Boulevard
MAY 5, 2022
In 2002 I sat in a local bookstore in Jackson Hole, WY that offered a few Internet-connected computers for hourly use. After chatting with the owner and petting the resident store dog, I took a few guesses at the password protecting these computers. It took me maybe 10 attempts. It was, of course, some variation […]… Read More.
eSecurity Planet
DECEMBER 14, 2022
Another key update, Leonard noted, patches CVE-2002-41076 , a critical remote code execution flaw in PowerShell with a CVSS score of 8.5. “Without the patch, an authenticated attacker could escape the PowerShell Session Configuration and run unapproved commands on the target system,” he said.
SecureWorld News
DECEMBER 14, 2022
Frank Abagnale, one of the world's most respected authorities on forgery, embezzlement, secure documents, cybercrime, and scams—and subject of the 2002 movie Catch Me If You Can — kicked off Vision 2023: Looking Ahead at Cyber Threats , a half-day educational event held live and recorded on December 13th.
Expert insights. Personalized for you.
144 
Let's personalize your content