Independent

IndependentSecuriteam

SSD Advisory – Ametys CMS Unauthenticated Password Reset

Credit to Author: SSD / Maor Schwartz| Date: Tue, 07 Nov 2017 09:23:50 +0000

Vulnerability Summary The following advisory describes a password reset vulnerability found in Ametys CMS version 4.0.2 Ametys is “a free and open source content management system (CMS) written in Java. It is based on JSR-170 for content storage, Open Social for gadget rendering and a XML oriented framework.” Credit An independent security researcher, Jose Luis, … Continue reading SSD Advisory – Ametys CMS Unauthenticated Password Reset

Read More
ComputerWorldIndependent

When Google Play Protect fails

Credit to Author: JR Raphael| Date: Tue, 07 Nov 2017 08:34:00 -0800

I’ve written a lot about Android security over the years — and more often than not, it’s the same ol’ story time and time again:

A company that sells mobile security software finds some theoretical threat — something that (a) hasn’t affected any actual users in the real world and (b) couldn’t affect any actual users in the real world, outside of a highly improbable scenario in which all native security measures are disabled and the user goes out of his way to download a questionable-looking app from some shady porn forum.

To read this article in full or to leave a comment, please click here

Read More