News

Latest news about B2B cyber security >>> PR agencies: add us to your mailing list - see contact! >>> Book an exclusive PartnerChannel for your news!

Network access possible: Lexmark SMB printer with 8.6 security vulnerability
B2B Cyber ​​Security ShortNews

A Server-Side Request Forgery (SSRF) vulnerability exists in newer Lexmark SMB devices. In some cases, an attacker can use SSRF to move through corporate networks to exploit otherwise unreachable internal systems or extract secrets. Updates are available. In its Security Advisory, Lexmark informs users of Lexmark devices for the SME sector about a highly dangerous security vulnerability with a CVSS value of 8.6 out of 10. This makes network access possible for attackers via Server-Side Request Forgery (SSRF). The manufacturer recommends an immediate update of the firmware of the affected devices. Over 150...

Read more

90 HP Notebooks and Desktops with BIOS Vulnerability
B2B Cyber ​​Security ShortNews

A potential security vulnerability has been identified in the system BIOS of 90 HP Notebook PCs, Desktop PCs and Desktop Workstation PCs that could allow escalation of privilege and code execution. HP is providing firmware updates to mitigate the potential security vulnerability. HP has identified the affected platforms and corresponding SoftPaqs with minimum versions that mitigate the potential vulnerabilities. Affected platforms include many HP models such as: HP Notebook Series Elite x2, EliteBook, ProBook, ZBook Series HP Desktop PC Series Elite Slice, EliteDesk, EliteOne, ProDesk, ProOne HP Desktop Workstation PC Series Z1 All-in Series -One, Z2…

Read more

Dangerous vulnerabilities in Thunderbird and Firefox
B2B Cyber ​​Security ShortNews

Mozilla publishes new vulnerabilities in Thunderbird, Firefox and Firefox ESR and rates them as Important. Users or company admins should ensure quick updates, as there is a risk that malicious code can be executed. In the list of vulnerabilities, these are all classified as “high” in terms of danger. After that, only Critical comes as the highest level. Mozilla defines it this way: “Vulnerabilities can be used to collect sensitive data from websites in other windows or to inject data or code into these websites, requiring no more than normal browsing actions.” It sounds…

Read more