Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-32686PUBLISHED: 2021-07-23
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP before version 2.11.1, there are a couple of issues found in the SSL socket. First, a race condition between callback and ...
CVE-2021-32783PUBLISHED: 2021-07-23
Contour is a Kubernetes ingress controller using Envoy proxy. In Contour before version 1.17.1 a specially crafted ExternalName type Service may be used to access Envoy's admin interface, which Contour normally prevents from access outside the Envoy container. This can be used to shut down Envoy rem...
CVE-2021-3169PUBLISHED: 2021-07-23An issue in Jumpserver 2.6.2 and below allows attackers to create a connection token through an API which does not have access control and use it to access sensitive assets.
CVE-2020-20741PUBLISHED: 2021-07-23
Incorrect Access Control in Beckhoff Automation GmbH & Co. KG CX9020 with firmware version CX9020_CB3011_WEC7_HPS_v602_TC31_B4016.6 allows remote attackers to bypass authentication via the "CE Remote Display Tool" as it does not close the incoming connection on the Windows CE side if t...
CVE-2021-25808PUBLISHED: 2021-07-23A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a crafted ZIP file.
The State of Cybersecurity Incident ResponseIn this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Tweet This
0 Comments
User Rank: Apprentice
7/19/2017 | 8:27:03 AM
CSO Magazine said this year that worldwide, there are 1 Million unfilled jobs. When you consider women in the network defender community, we find that they are almost non-existent. Forbes said last year that women make up only 11% of the cybersecurity workforce. If you add a minority to that checklist, say a black or Hispanic woman, that number drops to under 1%.
Clearly, if we are to close the gap, women and minorities have to be a source.
And we just can't tell our HR departments to hire more. Facebook, Google and others have all tried and failed.
Part of problem is that many women and minorities lose interest in STEM (Science, technology, engineering and math) subjects before they get to college. There are many reasons for this that have been well documented: male dominated culture turns women off, popular culture pushes women into "traditional" women's roles, minorities do not have access to strong STEM education, and others.
Another part of the problem stems from the cybersecurity old guard (Old white guys). We are the ones doing the hiring. We are the ones that tolerate sexism in the workplace when what we should be doing is stamping it out at every opportunity. We are the ones that are not mentoring the few minorities that do work for us and knocking down the obstacles that prevent them from succeeding.
This is the message that the network defender community should be hearing; especially from the old guard. Presenting that information at one of the most well-attended network defender conferences on the planet is a good place to do it.
Very respectfully,
Rick Howard
CSO
Palo Alto Networks
Full Disclosure: I am on Kelly's panel at Blackhat.