Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Author

 Maggie Jauregui & Brian Delgado
Twitter
LinkedIn
RSS
E-Mail

Profile of Maggie Jauregui & Brian Delgado

Security Researcher, Programmable Solutions Group at Intel / Red Team Lead, Programmable Services Group at Intel
Member Since: 3/16/2021
Author
News & Commentary Posts: 1
Comments: 1

Maggie Jauregui, Security Researcher, Programmable Solutions Group at Intel

Maggie Jauregui is a firmware and hardware FPGA security researcher for Intel's Programmable Solutions Group. Throughout her career, she has presented and delivered training presentations on firmware security topics at conferences such as DEF CON, CanSecWest, DerbyCon, NULLCON, hardwear.io, OSFC, and BSidesTLV. Follow on Twitter | LinkedIn

Brian Delgado, Red Team Lead, Programmable Services Group at Intel

Brian Delgado is the Red Team Lead for the Programmable Services Group (PSG) at Intel, focusing on security analysis of FPGA accelerators. Brian joined Intel Corp. in 1999 and has worked extensively on UEFI firmware security technologies, firmware fuzzing, and performance analysis. Brian earned his Ph.D. in Computer Science at Portland State University where he focused on firmware-assisted rootkit detection. He has given talks at a variety of technical forums including Hardware and Architectural Support for Security and Privacy (HASP), IEEE Dependable Systems and Networks (DSN), the Platform Security Summit, and IEEE International Symposium on Workload Characterization (IISWC). LinkedIn

Articles by Maggie Jauregui & Brian Delgado
News
Inside the Ransomware Campaigns Targeting Exchange Servers
Kelly Sheridan, Staff Editor, Dark Reading,  4/2/2021
Commentary
Beyond MITRE ATT&CK: The Case for a New Cyber Kill Chain
Rik Turner, Principal Analyst, Infrastructure Solutions, Omdia,  3/30/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-27394
PUBLISHED: 2021-04-16
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions < V8.12.5), Mendix Applications using Mendix 8 (V8.6) (All versions <...
CVE-2020-9667
PUBLISHED: 2021-04-16
Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker could exploit this to to plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction.
CVE-2020-9668
PUBLISHED: 2021-04-16
Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling symbolic links. An unauthenticated attacker could exploit this to elevate privileges in the context of the current user.
CVE-2020-9681
PUBLISHED: 2021-04-16
Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker could exploit this to rewrite the file of the administrator, which may lead to elevated permissions. Exploitation of this issue requires user interaction.
CVE-2021-26830
PUBLISHED: 2021-04-16
SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module.