Dell: 1,451 CVEs tracked, 92 critical, max CVSS 10. Command injection (CWE-78) tops the list with 106 findings. 18% still unpatched. Firmware is your blind spot. #Dell #cybersecurity #infosec
@hugovalters.bsky.social
@hugovalters.bsky.socialDell: 1,451 CVEs tracked, 92 critical, max CVSS 10. Command injection (CWE-78) tops the list with 106 findings. 18% still unpatched. Firmware is your blind spot. #Dell #cybersecurity #infosec
@hapsis.bsky.socialNo Identity, No Recovery: Cyber Resilience Starts With IAM
@communityaws.bsky.social"The Hidden Side of Cloud Computing: Why Cloud Security Matters" by Manisha Bishnoi
#amazon-cloudfront #aws-identity-and-access-management #artificial-intelligence #aws-cloudformation #cybersecurity
@trade2spike.bsky.social🎭 A cloned voice and a fake WhatsApp took €95M from a private bank
🔐 Deepfake fraud is now a balance-sheet risk
🔗 https://www.trade2spike.com/ai-in-action/fideuram-95-million-euro-fraud-cloned-voice-fake-whatsapp-message
#AI #Deepfake #Fraud #Cybersecurity #Banking #Fintech
@hugovalters.bsky.socialList holds a C trust score: all 3 CVEs unpatched, 100 percent. Avg CVSS 5.4, top flaw CWE-79 XSS. Patch debt adds up. https://www.valtersit.com/vendors/list/ #cybersecurity #infosec
@dumbpasswordrules.bsky.socialThis dumb password rule is from Seur.
Password must be between 8 and 12 characters...
Also no symbols are allowed. But this isn't displayed.
https://dumbpasswordrules.com/sites/seur/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
@ninjaowl.aiEnterprise AI Enters Risk Management Phase as Security Concerns Rise #cybersecurity #hacking #news #infosec #security #technology #privacy
@euvd-bot.bsky.social🚨 EUVD-2026-103249 📊 n/a 🏢 Unknown 📝 The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103249 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-103250 📊 n/a 🏢 Unknown 📝 The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature field value before building an email attachment path from i... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103250 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-103251 📊 n/a 🏢 Unknown 📝 The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in ad... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103251 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-103252 📊 n/a 🏢 Unknown 📝 The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerat... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103252 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-103253 📊 n/a 🏢 Unknown 📝 The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103253 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-103254 📊 n/a 🏢 Unknown 📝 The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing users with Contributor-leve... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103254 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-103255 📊 n/a 🏢 Unknown 📝 The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) WordPress plugin before 1.120.70 does not ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103255 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-103256 📊 n/a 🏢 Unknown 📝 The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing any authenticated user, such... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103256 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-103257 📊 n/a 🏢 Unknown 📝 The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subseque... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103257 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-103258 📊 n/a 🏢 Unknown 📝 The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its form-submission actions before writ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103258 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-103259 📊 n/a 🏢 Unknown 📝 The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated when it deserialises stored p... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103259 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-103260 📊 n/a 🏢 Unknown 📝 The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allo... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103260 #cybersecurity #infosec #cve #euvd
@ninjaintelgroup.bsky.social🗞 Critical BlockStrap flaw lets hackers run code on Magento servers
via BleepingComputer
https://www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/
#cybersecurity #infosec #threatintel