* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Tuesday, September 23, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    Caesars Entertainment (CZR): Assessing Valuation After Times Square Casino Setback and Mounting Investor Concerns – simplywall.st

    Caesars Entertainment Faces Times Square Casino Hurdles as Investor Concerns Mount

    Why Hilaria Baldwin Has Found the ‘DWTS’ Process ‘Embarrassing’ At Times – WFXG

    Hilaria Baldwin Opens Up About the Embarrassing Moments on Her ‘DWTS’ Journey

    Harvest Fest 2025 – yadkinripple.com

    Celebrate the Bounty: Harvest Fest 2025 is Coming!

    Fox News Entertainment Newsletter: Kate Middleton stuns during Trump state visit, Brett James dead at 57 – Fox News

    Kate Middleton Stuns During Trump State Visit; Remembering Brett James at 57

    Lara Beitz to headline Oshkosh show with top comedians at Time Community Theater Sept. 27 – Yahoo

    Lara Beitz to Headline Star-Studded Oshkosh Comedy Night on September 27

    Shakespeare (with a twist) in Grand Junction – Yahoo

    Experience Shakespeare Like Never Before in Grand Junction

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Agentic AI and the future of work: navigating technological promise and the risk of increased automation – Equal Times

    Agentic AI and the Future of Work: Embracing Innovation While Navigating Automation Challenges

    Technology alliance introduces system for stable recycling quality – RECYCLING magazine

    Innovative Technology Alliance Unveils Breakthrough System for Consistent Recycling Quality

    Pepper Pike council considers upgrading technology for streaming meetings, remote meeting participation – Cleveland.com

    Pepper Pike Council Explores Upgrading Technology for Enhanced Streaming and Remote Participation

    How Michelin Uses Technology to Rethink Tire Manufacturing: Interview – Motor1.com

    How Michelin’s Tech-Driven Revolution Is Transforming Tire Manufacturing

    Analysts Offer Insights on Technology Companies: Avnet (AVT), Nvidia (NVDA) and Atlassian (TEAM) – The Globe and Mail

    Experts Share Key Insights on Avnet, Nvidia, and Atlassian’s Future Prospects

    Top Technology Executives Recognized at the 2025 Carolina CIO ORBIE Awards – Yahoo Finance

    Celebrating Excellence: Top Technology Executives Honored at the 2025 Carolina CIO ORBIE Awards

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    Caesars Entertainment (CZR): Assessing Valuation After Times Square Casino Setback and Mounting Investor Concerns – simplywall.st

    Caesars Entertainment Faces Times Square Casino Hurdles as Investor Concerns Mount

    Why Hilaria Baldwin Has Found the ‘DWTS’ Process ‘Embarrassing’ At Times – WFXG

    Hilaria Baldwin Opens Up About the Embarrassing Moments on Her ‘DWTS’ Journey

    Harvest Fest 2025 – yadkinripple.com

    Celebrate the Bounty: Harvest Fest 2025 is Coming!

    Fox News Entertainment Newsletter: Kate Middleton stuns during Trump state visit, Brett James dead at 57 – Fox News

    Kate Middleton Stuns During Trump State Visit; Remembering Brett James at 57

    Lara Beitz to headline Oshkosh show with top comedians at Time Community Theater Sept. 27 – Yahoo

    Lara Beitz to Headline Star-Studded Oshkosh Comedy Night on September 27

    Shakespeare (with a twist) in Grand Junction – Yahoo

    Experience Shakespeare Like Never Before in Grand Junction

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Agentic AI and the future of work: navigating technological promise and the risk of increased automation – Equal Times

    Agentic AI and the Future of Work: Embracing Innovation While Navigating Automation Challenges

    Technology alliance introduces system for stable recycling quality – RECYCLING magazine

    Innovative Technology Alliance Unveils Breakthrough System for Consistent Recycling Quality

    Pepper Pike council considers upgrading technology for streaming meetings, remote meeting participation – Cleveland.com

    Pepper Pike Council Explores Upgrading Technology for Enhanced Streaming and Remote Participation

    How Michelin Uses Technology to Rethink Tire Manufacturing: Interview – Motor1.com

    How Michelin’s Tech-Driven Revolution Is Transforming Tire Manufacturing

    Analysts Offer Insights on Technology Companies: Avnet (AVT), Nvidia (NVDA) and Atlassian (TEAM) – The Globe and Mail

    Experts Share Key Insights on Avnet, Nvidia, and Atlassian’s Future Prospects

    Top Technology Executives Recognized at the 2025 Carolina CIO ORBIE Awards – Yahoo Finance

    Celebrating Excellence: Top Technology Executives Honored at the 2025 Carolina CIO ORBIE Awards

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Technology

CISA urges devs to weed out OS command injection vulnerabilities

July 11, 2024
in Technology
CISA urges devs to weed out OS command injection vulnerabilities
Share on FacebookShare on Twitter

CISA

​CISA and the FBI urged software companies on Wednesday to review their products and eliminate path OS command injection vulnerabilities before shipping.

The advisory was released in response to recent attacks that exploited multiple OS command injection security flaws (CVE-2024-20399, CVE-2024-3400, and CVE-2024-21887) to compromise Cisco, Palo Alto, and Ivanti network edge devices.

Velvet Ant, the Chinese state-sponsored threat actor that coordinated these attacks, deployed custom malware to gain persistence on hacked devices as part of a cyber espionage campaign.

“OS command injection vulnerabilities arise when manufacturers fail to properly validate and sanitize user input when constructing commands to execute on the underlying OS,” today’s joint advisory explains.

“Designing and developing software that trusts user input without proper validation or sanitization can allow threat actors to execute malicious commands, putting customers at risk.”

CISA advises developers to implement well-known mitigations to prevent OS command injection vulnerabilities at scale while designing and developing software products:

Use built-in library functions that separate commands from their arguments whenever possible instead of constructing raw strings fed into a general-purpose system command.
Use input parameterization to keep data separate from commands; validate and sanitize all user-supplied input.
Limit the parts of commands constructed by user input to only what is necessary.

Tech leaders should be actively involved in the software development process. They can do this by ensuring that the software uses functions that generate commands safely while preserving the command’s intended syntax and arguments.

Additionally, they should review threat models, use modern component libraries, conduct code reviews, and implement rigorous product testing to ensure the quality and security of their code throughout the development lifecycle.

CISA OS command injection tweet

“OS command injection vulnerabilities have long been preventable by clearly separating user input from the contents of a command. Despite this finding, OS command injection vulnerabilities—many of which result from CWE-78—are still a prevalent class of vulnerability,” CISA and the FBI added.

“CISA and FBI urge CEOs and other business leaders at technology manufacturers to request their technical leaders to analyze past occurrences of this class of defect and develop a plan to eliminate them in the future.”

OS command injection security bugs took the fifth spot in MITRE’s top 25 most dangerous software weaknesses, surpassed only by out-of-bounds write, cross-site scripting, SQL injection, and use-after-free flaws.

In May and March, two other “Secure by Design” alerts urged tech executives and software developers to weed out path traversal and SQL injection (SQLi) security vulnerabilities.

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : BleepingComputer – https://www.bleepingcomputer.com/news/security/cisa-urges-devs-to-weed-out-os-command-injection-vulnerabilities/

Tags: CommandtechnologyUrges
Previous Post

What Is NVIDIA Reflex & Should You Enable It?

Next Post

ViperSoftX malware covertly runs PowerShell using AutoIT scripting

U.S. and Israel against the world as Palestine dominates UN week – Axios

U.S. and Israel against the world as Palestine dominates UN week – Axios

September 23, 2025
Global economic outlook weakens as policy uncertainty weighs on demand – OECD

Global economic outlook weakens as policy uncertainty weighs on demand – OECD

September 23, 2025
Caesars Entertainment (CZR): Assessing Valuation After Times Square Casino Setback and Mounting Investor Concerns – simplywall.st

Caesars Entertainment Faces Times Square Casino Hurdles as Investor Concerns Mount

September 23, 2025
AI Tool Predicts Health Problems in Patients 20 Years Before They Emerge – eWeek

AI Tool Detects Health Issues Two Decades Before Symptoms Appear

September 23, 2025
Germany’s €80B Rearmament Plan Sidelines US Weapons – politicstoday.org

Germany’s €80B Rearmament Plan Sidelines US Weapons – politicstoday.org

September 23, 2025
FOCUS | SCIO holds press conference on promoting high-quality development through high-level ecological & environmental protection – Xinhua

FOCUS | SCIO holds press conference on promoting high-quality development through high-level ecological & environmental protection – Xinhua

September 23, 2025
Researcher on Tylenol-Autism Connection: Not the Best Science – Managed Healthcare Executive

Researcher Questions the Science Behind Tylenol-Autism Link

September 23, 2025
Da Vinci’s Genetic Secrets May Soon Be Revealed by Ambitious DNA Project – ScienceAlert

Unlocking Da Vinci’s Genetic Mysteries: The Ambitious DNA Project Set to Reveal All

September 23, 2025
Eco-Chic Home & Lifestyle Design Market Is Booming Worldwide | Major Giants The Joinery, Emeco, Greenington – openPR.com

Eco-Chic Home & Lifestyle Design Market Is Booming Worldwide | Major Giants The Joinery, Emeco, Greenington – openPR.com

September 23, 2025
Agentic AI and the future of work: navigating technological promise and the risk of increased automation – Equal Times

Agentic AI and the Future of Work: Embracing Innovation While Navigating Automation Challenges

September 23, 2025

Categories

Archives

September 2025
MTWTFSS
1234567
891011121314
15161718192021
22232425262728
2930 
« Aug    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (832)
  • Economy (853)
  • Entertainment (21,731)
  • General (17,194)
  • Health (9,896)
  • Lifestyle (865)
  • News (22,149)
  • People (855)
  • Politics (863)
  • Science (16,063)
  • Sports (21,352)
  • Technology (15,835)
  • World (837)

Recent News

U.S. and Israel against the world as Palestine dominates UN week – Axios

U.S. and Israel against the world as Palestine dominates UN week – Axios

September 23, 2025
Global economic outlook weakens as policy uncertainty weighs on demand – OECD

Global economic outlook weakens as policy uncertainty weighs on demand – OECD

September 23, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version