Login

Recent searches

No recent searches

Search options

Only available when logged in.
fosstodon.org is one of the many independent Mastodon servers you can use to participate in the fediverse.
Fosstodon is an invite only Mastodon instance that is open to those who are interested in technology; particularly free & open source software. If you wish to join, contact us for an invite.

Administered by:

Server stats:

9.9K
active users

fosstodon.org: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#Splunk

2 posts2 participants0 posts today
Public
The Threat Codex

Sensitive Information Disclosure in Splunk Secure Gateway App
#CVE_2025_20229 #Splunk
advisory.splunk.com/advisories

Splunk Vulnerability DisclosureSensitive Information Disclosure in Splunk Secure Gateway AppIn Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could run a search using the permissions of a higher-privileged user that could lead to disclosure of sensitive information. <br><br>The Splunk Secure Gateway exposes user session and authorization tokens in clear text in the splunk_secure_gateway.log file when it calls the `/services/ssg/secrets` REST endpoint. <br><br>The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The authenticated low-privileged user should not be able to exploit the vulnerability at will.
Public
AndiMann

ICYMI: on the latest #TechstrongTV I join the Gang to go deep on #Google #acquisition of #CNAP (#cloud #cybersecurity) with #Wiz, esp. how it hits #AWS, #Azure, #Cisco, #Splunk, #Crowdstrike, #PANW, ++. Just don't call it #DevSecOps!

Plus, #AI is failing, even for religion!

techstrong.tv/videos/videos/te

Techstrong TVTechstrong Gang - March 19, 2025 - Techstrong TVAlan, Mike, Mitch, Andi Mann and Lisa Martin, CMO Advisor for The Futurum Group, dive into why Google is spending $32 billion to acquire Wiz, a provider of a cloud native application protection platform (CNAPP).Then, the gang discusses the challenges organizations are running into as they attempt to operationalize artificial intelligence (AI) before discussing the impact AI might have on religion.
Public
AndiMann

ICYMI, on the latest #TechstrongTV I join the Gang to go deep on #Google #acquisition of #CNAP (#cloud #cybersecurity) with #Wiz, esp. how it hits #AWS, #Azure, #Cisco, #Splunk, #Crowdstrike, #PANW, ++. Just don't call it #DevSecOps!

Plus, #AI is failing, even for religion!

techstrong.tv/videos/videos/te

Techstrong TVTechstrong Gang - March 19, 2025 - Techstrong TVAlan, Mike, Mitch, Andi Mann and Lisa Martin, CMO Advisor for The Futurum Group, dive into why Google is spending $32 billion to acquire Wiz, a provider of a cloud native application protection platform (CNAPP).Then, the gang discusses the challenges organizations are running into as they attempt to operationalize artificial intelligence (AI) before discussing the impact AI might have on religion.
Public
AndiMann

ICYMI, on the latest #TechstrongTV I join the Gang to go deep on #Google #acquisition of #CNAP (#cloud #cybersecurity) with #Wiz, esp. how it hits #AWS, #Azure, #Cisco, #Splunk, #Crowdstrike, #PANW, ++. Just don't call it #DevSecOps!

Plus, #AI is failing, even for religion!

techstrong.tv/videos/videos/te

Techstrong TVTechstrong Gang - March 19, 2025 - Techstrong TVAlan, Mike, Mitch, Andi Mann and Lisa Martin, CMO Advisor for The Futurum Group, dive into why Google is spending $32 billion to acquire Wiz, a provider of a cloud native application protection platform (CNAPP).Then, the gang discusses the challenges organizations are running into as they attempt to operationalize artificial intelligence (AI) before discussing the impact AI might have on religion.
Public
AndiMann

Super new drop from #TechstrongTV! I join the Gang to go deep on #Google #acquisition of #CNAP (#cloud #cybersecurity) with #Wiz, esp. how it hits #AWS, #Azure, #Cisco, #Splunk, #Crowdstrike, #PANW, ++. Just don't call it #DevSecOps!

Plus, #AI is failing, even for religion!

techstrong.tv/videos/videos/te

Techstrong TVTechstrong Gang - March 19, 2025 - Techstrong TVAlan, Mike, Mitch, Andi Mann and Lisa Martin, CMO Advisor for The Futurum Group, dive into why Google is spending $32 billion to acquire Wiz, a provider of a cloud native application protection platform (CNAPP).Then, the gang discusses the challenges organizations are running into as they attempt to operationalize artificial intelligence (AI) before discussing the impact AI might have on religion.
ExploreLive feeds
About