Critical Flaws Uncovered in Pentaho Business Analytics Software

The Hacker News Daily Updates Tribe of Hackers Security Leaders: Tribal Knowledge from the Best in Cybersecurity Leadership ($15.00 Value) FREE for a Limited Time Tribal Knowledge from the Best in Cybersecurity Leadership Download Now Sponsored LATEST NEWS Nov 2, 2021 Alert! Hackers Exploiting GitLab Unauthenticated RCE Flaw in the Wild A now-patched critical remote code execution (RCE) vulnerability in GitLab's web interface has been detected as actively exploited in the wild, cybersecurity researchers warn, rendering a large number of internet-facing GitLab instances susceptible to attacks. Tracked as CVE-2021-22205, the issue ... Read More Google to Pay Hackers $31,337 for Exploiting Patched Linux Kernel Flaws Google on Monday announced that it will pay security researchers to find exploits using vulnerabilities, previously remediated or otherwise, over the next three months as part of a new bug bounty program to improve the security of the Linux kernel. To that end, the company is expected to issue ... Read More Critical Flaws Uncovered in Pentaho Business Analytics Software Multiple vulnerabilities have been disclosed in Hitachi Vantara's Pentaho Business Analytics software that could be abused by malicious actors to upload arbitrary data files and even execute arbitrary code on the underlying host system of the application. The security weaknesses were reported by ... Read More Securing SaaS Apps — CASB vs. SSPM There is often confusion between Cloud Access Security Brokers (CASB) and SaaS Security Posture Management (SSPM) solutions, as both are designed to address security issues within SaaS applications. CASBs protect sensitive data by implementing multiple security policy enforcements to safeguard ... Read More New 'Trojan Source' Technique Lets Hackers Hide Vulnerabilities in Source Code A novel class of vulnerabilities could be leveraged by threat actors to inject visually deceptive malware in a way that's semantically permissible but alters the logic defined by the source code, effectively opening the door to more first-party and supply chain risks. Dubbed "Trojan Source ... Read More Tribe of Hackers Security Leaders: Tribal Knowledge from the Best in Cybersecurity Leadership ($15.00 Value) FREE for a Limited Time Tribal Knowledge from the Best in Cybersecurity Leadership Download Now Sponsored This email was sent to myemailku.ghdbrevo2018@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from The Hacker News. To manage your email newsletter preferences, please click here. Contact The Hacker News: info@thehackernews.com Unsubscribe The Hacker News | Pearls Omaxe, Netaji Subash Place, Pitampura, Delhi 110034 India