NewApp Digest
search bot

security guide

New Critical Windows Defender Vulnerability Confirmed By Microsoft
Winsage
December 14, 2024

New Critical Windows Defender Vulnerability Confirmed By Microsoft

Microsoft confirmed a critical security vulnerability in Windows Defender, designated as CVE-2024-49071, which could allow unauthorized access to sensitive information indexed during global file searches. The vulnerability arose from inadequate restrictions on access to the search index for private documents. Despite the potential risk, there have been no known exploitations of this flaw, and an attacker would need some level of access to exploit it. Microsoft has resolved the issue through backend fixes and advises users that no action is necessary on their part.
DISA Releases Guidance to Securely Use Crunchy Data PostgreSQL Within DOD
Tech Optimizer
July 4, 2024

DISA Releases Guidance to Securely Use Crunchy Data PostgreSQL Within DOD

The Defense Information Systems Agency (DISA) has released a Security Technical Implementation Guide (STIG) for implementing Crunchy Data PostgreSQL versions 13 to 16 within the Department of Defense (DoD). The STIG provides guidelines for configuring PostgreSQL databases to enhance security, including configuration management, access controls, data encryption, and audit and monitoring procedures. Adhering to the STIG can help DoD entities reduce the risk of cyberattacks and protect the integrity and confidentiality of their data.
Search