
“Four leading network management system providers are busy patching and preparing fixes for a half-dozen critical cross-site scripting and SQL injection vulnerabilities disclosed Wednesday by Rapid7. Three of the affected vendors, Spiceworks, Ipswitch and Opsview, have already patched their respective products, while Castle Rock Computing has yet to set a timeline for the availability of patches. These management planes provide enterprises with a view into network activity and performance, and hackers with an attractive attack vector.”
https://threatpost.com/critical-flaws-found-in-network-management-systems/115649/
Related posts:
IRS employee brought home ‘sensitive’ data on 20,000 individuals
The Michael Hastings Wreck: Video Evidence Only Deepens The Mystery
FATCA: Breaking through Fear with a Swiss Referendum
$6 Billion Goes Missing at State Department
What the FISA Memo Reveals about the FBI, DNC, GOP–and the sketchy timeline
Presidents of ABC and CBS News have siblings working at White House
Gold smuggling rampant in India
Andreas Antonopoulos on Bitcoin @ Maker Faire 2014
Toobin Preaches Sanctity of Gov. Secrets, Despite Himself Stealing Classified Docs
How Quickly The War On Drugs Changed America's Prison Population
As Bitcoin booms, digital robbers take advantage
Here Comes The Federal Vaccination Registry System
Switzerland's Earth Houses resemble real-life Hobbit Holes
Draft Trump Executive Order Would Resume Torture, Because "It Works"
The Right to Resist -- and the Duty to Interpose