Aggregator

International Engagement Blog: Singapore International Cyber Week, the Regional Initiative for Cybersecurity Education and Training, and More

NIST | Cybersecurity Insights
3 years 5 months ago
NIST has continued to collaborate into the fall season with partners throughout the world on the Cybersecurity Framework 2.0 update. International engagement and alignment with international standards are important themes for the 2.0 update and will drive changes to ensure global relevance. As part of this ongoing international engagement, NIST welcomed visitors to the NCCoE and NIST headquarters to discuss various cybersecurity topics and explore areas for mutual collaboration. In the past few weeks, NIST met with visitors from Italy, Singapore, New Zealand, Germany, and Brazil at the NCCoE
Amy Mahn

Critical RCE in Microsoft SPENGO Extended Negotiation Security Mechanism

X-Force Exchange - Collection Feed
3 years 5 months ago
Summary A Critical Remote Code Execution Vulnerability in Microsoft's SPENGO Extended Negotiation Security Mechanism has been disclosed. A vendor provided patch is available to fix this flaw. Threat Type Vulnerability Overview In September 2022, Microsoft patched an information disclosure vulnerability in SPNEGO NEGOEX (CVE-2022-37958). On December 13, Microsoft reclassified the vulnerability as “Critical” severity after IBM Security X-Force Red Security Researcher Valentina Palmiotti discovered the vulnera

Managed ad