* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Monday, September 1, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    Country music star apologizes after drunken show ends with cops taking him down: ‘I’m not OK’ – PennLive.com

    Country Music Star Apologizes After Drunken Show Ends in Police Intervention: ‘I’m Not OK

    Comanche Nation Entertainment closes casino near Devol – KSWO 7News

    Comanche Nation Entertainment Closes Casino Near Devol in Surprising Move

    Erykah Badu Announces ‘Abi & Alan’ Album With The Alchemist Will Be Delayed – yahoo.com

    Erykah Badu Opens Up About the Delay of Her Highly Anticipated ‘Abi & Alan’ Album with The Alchemist

    If You Needed Some BTS Pics Of The Rock’s Tree Trunk Legs To Spice Up Your Day, We Got ‘Em – yahoo.com

    Need a Boost? Check Out These Epic BTS Shots of The Rock’s Tree Trunk Legs!

    Sabrina Carpenter’s pearl-clutching magic? Humor – CNN

    Sabrina Carpenter’s pearl-clutching magic? Humor – CNN

    South Park Is In Trouble And Needs To Change Course, Fast – yahoo.com

    South Park Faces Major Challenges and Must Adapt Fast to Survive

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    This Secret Technology Will Make The IPhone 17 Super Thin Air – VOI.ID

    How This Breakthrough Technology Will Make the iPhone 17 Incredibly Thin and Lightweight

    Gator football kicks off with excitement and new technology – WCJB | TV20

    Gator Football Kicks Off with Thrilling Action and Innovative Technology

    Marvell Technology (MRVL) Loses 18.6% as Growth Outlook Fails to Impress – Yahoo Finance

    Marvell Technology (MRVL) Loses 18.6% as Growth Outlook Fails to Impress – Yahoo Finance

    Propelling solar technology into a perovskite future – CORDIS

    Propelling solar technology into a perovskite future – CORDIS

    13 Top Technology Trends (2025) – Exploding Topics

    13 Game-Changing Technology Trends to Watch in 2025

    Japan’s legacy LCD and chip technology find new home in India – Nikkei Asia

    How Japan’s Breakthrough LCD and Chip Technologies Are Driving Innovation in India

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    Country music star apologizes after drunken show ends with cops taking him down: ‘I’m not OK’ – PennLive.com

    Country Music Star Apologizes After Drunken Show Ends in Police Intervention: ‘I’m Not OK

    Comanche Nation Entertainment closes casino near Devol – KSWO 7News

    Comanche Nation Entertainment Closes Casino Near Devol in Surprising Move

    Erykah Badu Announces ‘Abi & Alan’ Album With The Alchemist Will Be Delayed – yahoo.com

    Erykah Badu Opens Up About the Delay of Her Highly Anticipated ‘Abi & Alan’ Album with The Alchemist

    If You Needed Some BTS Pics Of The Rock’s Tree Trunk Legs To Spice Up Your Day, We Got ‘Em – yahoo.com

    Need a Boost? Check Out These Epic BTS Shots of The Rock’s Tree Trunk Legs!

    Sabrina Carpenter’s pearl-clutching magic? Humor – CNN

    Sabrina Carpenter’s pearl-clutching magic? Humor – CNN

    South Park Is In Trouble And Needs To Change Course, Fast – yahoo.com

    South Park Faces Major Challenges and Must Adapt Fast to Survive

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    This Secret Technology Will Make The IPhone 17 Super Thin Air – VOI.ID

    How This Breakthrough Technology Will Make the iPhone 17 Incredibly Thin and Lightweight

    Gator football kicks off with excitement and new technology – WCJB | TV20

    Gator Football Kicks Off with Thrilling Action and Innovative Technology

    Marvell Technology (MRVL) Loses 18.6% as Growth Outlook Fails to Impress – Yahoo Finance

    Marvell Technology (MRVL) Loses 18.6% as Growth Outlook Fails to Impress – Yahoo Finance

    Propelling solar technology into a perovskite future – CORDIS

    Propelling solar technology into a perovskite future – CORDIS

    13 Top Technology Trends (2025) – Exploding Topics

    13 Game-Changing Technology Trends to Watch in 2025

    Japan’s legacy LCD and chip technology find new home in India – Nikkei Asia

    How Japan’s Breakthrough LCD and Chip Technologies Are Driving Innovation in India

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Technology

CISA urges devs to weed out OS command injection vulnerabilities

July 11, 2024
in Technology
CISA urges devs to weed out OS command injection vulnerabilities
Share on FacebookShare on Twitter

CISA

​CISA and the FBI urged software companies on Wednesday to review their products and eliminate path OS command injection vulnerabilities before shipping.

The advisory was released in response to recent attacks that exploited multiple OS command injection security flaws (CVE-2024-20399, CVE-2024-3400, and CVE-2024-21887) to compromise Cisco, Palo Alto, and Ivanti network edge devices.

Velvet Ant, the Chinese state-sponsored threat actor that coordinated these attacks, deployed custom malware to gain persistence on hacked devices as part of a cyber espionage campaign.

“OS command injection vulnerabilities arise when manufacturers fail to properly validate and sanitize user input when constructing commands to execute on the underlying OS,” today’s joint advisory explains.

“Designing and developing software that trusts user input without proper validation or sanitization can allow threat actors to execute malicious commands, putting customers at risk.”

CISA advises developers to implement well-known mitigations to prevent OS command injection vulnerabilities at scale while designing and developing software products:

Use built-in library functions that separate commands from their arguments whenever possible instead of constructing raw strings fed into a general-purpose system command.
Use input parameterization to keep data separate from commands; validate and sanitize all user-supplied input.
Limit the parts of commands constructed by user input to only what is necessary.

Tech leaders should be actively involved in the software development process. They can do this by ensuring that the software uses functions that generate commands safely while preserving the command’s intended syntax and arguments.

Additionally, they should review threat models, use modern component libraries, conduct code reviews, and implement rigorous product testing to ensure the quality and security of their code throughout the development lifecycle.

CISA OS command injection tweet

“OS command injection vulnerabilities have long been preventable by clearly separating user input from the contents of a command. Despite this finding, OS command injection vulnerabilities—many of which result from CWE-78—are still a prevalent class of vulnerability,” CISA and the FBI added.

“CISA and FBI urge CEOs and other business leaders at technology manufacturers to request their technical leaders to analyze past occurrences of this class of defect and develop a plan to eliminate them in the future.”

OS command injection security bugs took the fifth spot in MITRE’s top 25 most dangerous software weaknesses, surpassed only by out-of-bounds write, cross-site scripting, SQL injection, and use-after-free flaws.

In May and March, two other “Secure by Design” alerts urged tech executives and software developers to weed out path traversal and SQL injection (SQLi) security vulnerabilities.

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : BleepingComputer – https://www.bleepingcomputer.com/news/security/cisa-urges-devs-to-weed-out-os-command-injection-vulnerabilities/

Tags: CommandtechnologyUrges
Previous Post

What Is NVIDIA Reflex & Should You Enable It?

Next Post

ViperSoftX malware covertly runs PowerShell using AutoIT scripting

ECB’s Lagarde warns of risk to world economy via Trump interference on Fed – Reuters

ECB’s Lagarde warns of risk to world economy via Trump interference on Fed – Reuters

September 1, 2025
The Resilient Engine: Investing in Poland’s Outperforming Economy Amid Global Slowdown – AInvest

The Resilient Engine: Why Investing in Poland’s Booming Economy Is a Smart Move Amid Global Slowdown

September 1, 2025
Country music star apologizes after drunken show ends with cops taking him down: ‘I’m not OK’ – PennLive.com

Country Music Star Apologizes After Drunken Show Ends in Police Intervention: ‘I’m Not OK

September 1, 2025
Arts to promote mental health goal of new University of Michigan clinical program – MLive.com

Innovative University of Michigan Program Harnesses the Arts to Enhance Mental Health

September 1, 2025
Meet the man defending Trump’s political adversaries – ABC News

Meet the man defending Trump’s political adversaries – ABC News

September 1, 2025
Sky High Farm’s Biennial Blends Art, Agriculture and Ecological Urgency – observer.com

Sky High Farm’s Biennial Blends Art, Agriculture and Ecological Urgency – observer.com

September 1, 2025

After 150 Job Applications and Rescinded Offers, Computer Science Grads Face an Unforgiving Job Market

September 1, 2025
Proportion of US students taking chemistry fails to keep pace with other science disciplines – Chemistry World

Why Fewer US Students Are Choosing Chemistry Compared to Other Sciences

September 1, 2025
Going zero-waste for a month opened my eyes — here are 7 lessons I wish I knew sooner – VegOut

7 Eye-Opening Lessons I Learned from Living Zero-Waste for a Month

September 1, 2025
This Secret Technology Will Make The IPhone 17 Super Thin Air – VOI.ID

How This Breakthrough Technology Will Make the iPhone 17 Incredibly Thin and Lightweight

September 1, 2025

Categories

Archives

September 2025
MTWTFSS
1234567
891011121314
15161718192021
22232425262728
2930 
« Aug    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (801)
  • Economy (820)
  • Entertainment (21,700)
  • General (16,798)
  • Health (9,861)
  • Lifestyle (834)
  • News (22,149)
  • People (821)
  • Politics (828)
  • Science (16,030)
  • Sports (21,318)
  • Technology (15,800)
  • World (801)

Recent News

ECB’s Lagarde warns of risk to world economy via Trump interference on Fed – Reuters

ECB’s Lagarde warns of risk to world economy via Trump interference on Fed – Reuters

September 1, 2025
The Resilient Engine: Investing in Poland’s Outperforming Economy Amid Global Slowdown – AInvest

The Resilient Engine: Why Investing in Poland’s Booming Economy Is a Smart Move Amid Global Slowdown

September 1, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version