Researchers discover alternative local attack vector in Log4j

Blumira research team has discovered an alternative attack vector in the Log4j vulnerability that relies on a basic Javascript WebSocket connection to trigger the RCE locally via drive-by compromise.

from Cyber Security News https://ift.tt/3J5VWcf

7 essential capabilities to consider when evaluating ERP security, risk and compliance solutions

Here are seven questions to ask vendors to guide your organization's evaluation of enterprise resource planning (ERP) application security, risk and compliance solutions and help them understand which features are genuinely the most valuable.

from Cyber Security News https://ift.tt/3pbzAhy