Are AD Ids and medical doctors' Medical Registration number deemed as PII?
Are the following deemed as PII (Personally Identifiable Information)?:
a) staffs' AD Id (Active
…![]()
Vulnerabilities
A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three eleme...
Read more- 7.7K Content
- 5.0K Contributors
Expert Spotlight
COG Lead Engineer
I'm Shaun Vermaak. I love tech and how it improves life and business. Did you find what you were looking for?
Leading Experts In
Advice Solution
Advice Solution
WatchGuard Firewal - unable to access the WEB UI
Hello everyone,
I am currently managing a WatchGuard M500 firewall and accidentally disabled the Web
Research Solution
Threat Modelling of SaaS vendor or the tenant is more crucial?
We host only public info (non-sensitive data) on a few portals in SiteCore XM SaaS.
Q1:
Would it be
…
Troubleshooting Solution
TLS v1.3, Cipher Suite Hardening, and Rate Limiting on Exchange Server 2016
Dear Experts,
We are currently operating an on-premises email infrastructure comprising:
- Windows
Advice Solution
Kali Linux VM as a Jump Host for 3rd Party VAPT
Hi
We hired a 3rd party company to perform a black box VAPT on our internal & external apps, servers
Advice Solution
Pros & cons of Letsencrypt for SSL certs
Some queries were raised if it's Ok to use LetsEncrypt (LE) for SSL certs (for both Internet-facing
…
Advice Solution
Research Solution
Use cases for SharePoint Online & Purview SOC monitoring
We're setting up several SharePoint Online (SPO) portals. Though there's SOC2 Type 2, the security
…
Advice Solution
is separate penetration tests & secure code scans needed for new sub-url portals?
A project team told me that they've done penetration test and secure code review on the main
…
Advice Solution
GnuPG latest stable release has a low-risk CVE: do we accept risk or update to 'public test' / beta version?
We used GnuPG tool & during vulnerability scan, it flags out the following low-rated finding:
…
Troubleshooting Solution
SSL Cert with Wrong Hostname: team felt this is a false penetration test finding
Refer to project manager's assertion below? He's claiming the penetration tester's finding is a
…
Research Solution
is Thales' Openssh ver 8.3 still supported?
Q1:
Is OpenSsh Ver 8.3 on Talos appliance still supported by Talos or deemed as
…
Advice Solution
Azure Security center access for AEM customers
We are hosting portals on AEM (Adobe Experience Manager).
Would it be possible to extract from Azure
…
Troubleshooting Solution
Microsoft .Net Framework cleanup
We had a pentest done lately and trying to fill the gaps and remediate issues.
In our toolset, we
…
Advice Solution
Using RSA2048/AES to replace MD5 (rather than using SHA2/3)??
In an upcoming project, they're using MD5 to encrypt Chat (or Chat Bots transcripts/messages):
I
…
Troubleshooting Solution
Intermittent Issue with Missing Email Attachments in Exchange Server 2019
Hello Community,
This is an issue I hadn’t experienced before. For example, today I sent an external
…
Troubleshooting Solution
is the ciphers obtainable from registry key of Win OS the actual ciphers offered by the web server
We don't have a scanner to scan the SSL ciphers used by our Intranet webserver.
Q1:
Instead can just
…
Advice Solution
fraud transactions on bank debit card
Hi,
Some one keep doing fraud transaction using my bank debit card. I changed the card 2 weeks back
…
Advice Solution
Advice Solution
Security scores dashboard from commercial cloud; AWS screen to show available cloudwatch log groups
From our commercial cloud's dashboard, we got the following two screens:
Q1:
Should I ask the project
…Explore solutions and more
![]()
VulnerabilitiesBack to the top
A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness, known as the attack surface. Vulnerability management is the cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities. Other vulnerabilities include security risks, security defects and constructs in programming languages that are difficult to use properly.