ATENTION‼ New - CVE-2015-3006
📖 Read
via "National Vulnerability Database".
On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for some time, but immediately after boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks products or platforms are affected by this weak entropy vulnerability.📖 Read
via "National Vulnerability Database".
🔐 Fraud alert: Voice authentication platform analyzes 1,380 data points per call 🔐
📖 Read
via "Security on TechRepublic".
Pindrop's dashboard scores the caller, the device, and the behavior to spot bad actors and authentic customers.📖 Read
via "Security on TechRepublic".
TechRepublic
Fraud alert: Voice authentication platform analyzes 1,380 data points per call
Pindrop's dashboard scores the caller, the device, and the behavior to spot bad actors and authentic customers.
🛠 SerialTweaker 1.1 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
SerialTweaker is a tool that can be used to load a serialized object, change its contents, and reserialize it to a new serialized object with modified fields inside.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
SerialTweaker 1.1 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 nfstream 3.2.2 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
nfstream is a Python package providing fast, flexible, and expressive data structures designed to make working with online or offline network data both easy and intuitive. It aims to be the fundamental high-level building block for doing practical, real world network data analysis in Python. Additionally, it has the broader goal of becoming a common network data processing framework for researchers providing data reproducibility across experiments.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
nfstream 3.2.2 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
ATENTION‼ New - CVE-2019-17026
📖 Read
via "National Vulnerability Database".
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 68.4.1, Thunderbird < 68.4.1, and Firefox < 72.0.1.📖 Read
via "National Vulnerability Database".
⚠ Monday review – the hot 23 stories of the week ⚠
📖 Read
via "Naked Security".
From Chrome's mystery zero-day to why the EC has switched to Signal, get yourself up to date with everything we've written in the last week.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🔐 5G and IoT security: Why cybersecurity experts are sounding an alarm 🔐
📖 Read
via "Security on TechRepublic".
Without regulation and strong proactive measures, 5G networks remain vulnerable to cyberattacks, and the responsibility falls on businesses and governments.📖 Read
via "Security on TechRepublic".
TechRepublic
5G and IoT security: Why cybersecurity experts are sounding an alarm
Without regulation and strong proactive measures, 5G networks remain vulnerable to cyberattacks, and the responsibility falls on businesses and governments.
⚠ Facebook sues data analytics firm OneAudience over malicious SDK ⚠
📖 Read
via "Naked Security".
Facebook says OneAudience paid developers to install its social-media-profile-looting SDK into their apps to get marketing data for clients.📖 Read
via "Naked Security".
Naked Security
Facebook sues data analytics firm OneAudience over malicious SDK
Facebook says OneAudience paid developers to install its social-media-profile-looting SDK into their apps to get marketing data for clients.
⚠ Fresh phish! Stripe scam baked and delivered in under an hour ⚠
📖 Read
via "Naked Security".
Less than an hour after the crooks registered their scamming domain, the phishing attack was under way.📖 Read
via "Naked Security".
Naked Security
Fresh phish! Stripe scam baked and delivered in under an hour
Less than an hour after the crooks registered their scamming domain, the phishing attack was under way.
⚠ Ironpie robot vacuum can suck up your privacy ⚠
📖 Read
via "Naked Security".
You might want to unplug this not-so-smart robot: researchers found they can watch video streams piped out from its security camera.📖 Read
via "Naked Security".
Naked Security
Ironpie robot vacuum can suck up your privacy
You might want to unplug this not-so-smart robot: researchers found they can watch video streams piped out from its security camera.
⚠ Let’s Encrypt issues one billionth free certificate ⚠
📖 Read
via "Naked Security".
Thanks to this flood of free certificates, the web is a lot more encrypted than it was a few years ago.📖 Read
via "Naked Security".
Naked Security
Let’s Encrypt issues one billionth free certificate
Thanks to this flood of free certificates, the web is a lot more encrypted than it was a few years ago.
🕴 What Disney+ Can Teach Businesses About Customer Security 🕴
📖 Read
via "Dark Reading: ".
Businesses must prioritize customer protection by taking on some of the responsibility to prevent credential stuffing attacks through multipronged authentication and identity management.📖 Read
via "Dark Reading: ".
Dark Reading
What Disney+ Can Teach Businesses About Customer Security - Dark Reading
Businesses must prioritize customer protection by taking on some of the responsibility to prevent credential stuffing attacks through multipronged authentication and identity management.
ATENTION‼ New - CVE-2018-17058
📖 Read
via "National Vulnerability Database".
An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerability in the picture-upload feature of ProductEdit.aspx. An authenticated attacker may bypass the frontend filename validation and upload an arbitrary file via FileUploader.aspx.cs in FileUploader.aspx by using empty w and h parameters. This file may contain arbitrary aspx code that may be executed by accessing /Jec/ProductImages/<number>/<filename>. Accessing the file once uploaded does not require authentication.📖 Read
via "National Vulnerability Database".
❌ Walgreens Mobile App Leaks Prescription Data ❌
📖 Read
via "Threatpost".
A security error in the Walgreens mobile app may have leaked customers' full names, prescriptions and shipping addresses.📖 Read
via "Threatpost".
Threat Post
Walgreens Mobile App Leaks Prescription Data
A security error in the Walgreens mobile app may have leaked customers' full names, prescriptions and shipping addresses.
🕴 Name That Toon: Holy Cow! 🕴
📖 Read
via "Dark Reading: ".
Feeling creative? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.📖 Read
via "Dark Reading: ".
Dark Reading
Name That Toon: Holy Cow!
Feeling creative? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.
🔐 Morphisec is using the Windows 10 transition to help companies boost security 🔐
📖 Read
via "Security on TechRepublic".
Morphisec combines the anti-virus protection in the new Microsoft OS with its own defenses against malware.📖 Read
via "Security on TechRepublic".
TechRepublic
Morphisec is using the Windows 10 transition to help companies boost security
Morphisec combines the anti-virus protection in the new Microsoft OS with its own defenses against malware.
❌ TrickBot Adds ActiveX Control, Hides Dropper in Images ❌
📖 Read
via "Threatpost".
The tricky trojan has evolved again, to stay a step ahead of defenders.📖 Read
via "Threatpost".
Threat Post
TrickBot Adds ActiveX Control, Hides Dropper in Images
The tricky trojan has evolved again, to stay a step ahead of defenders.
🕴 Tesla, SpaceX Parts Manufacturer Suffers Data Breach 🕴
📖 Read
via "Dark Reading: ".
Visser Precision has confirmed a security incident likely caused by the data-stealing DoppelPaymer ransomware.📖 Read
via "Dark Reading: ".
Darkreading
Tesla, SpaceX Parts Manufacturer Suffers Data Breach
Visser Precision has confirmed a security incident likely caused by the data-stealing DoppelPaymer ransomware.
ATENTION‼ New - CVE-2019-12183
📖 Read
via "National Vulnerability Database".
Incorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers to read any file via the administrative API.📖 Read
via "National Vulnerability Database".