Rewterz Threat Advisory –PetitPotam NTLM Relay Attacks
July 29, 2021Rewterz Threat Advisory –CVE- 2021-20505 – IBM Power System Information Disclosure
July 30, 2021High
Node.js could allow a remote attacker to bypass security restrictions, caused by a use-after-free on close http2 on stream canceling. An attacker could exploit this vulnerability to corrupt memory to change process behavior.
Node.js
Upgrade to the latest version of Node.js, available from the Node.js Web site.
Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.
