ATENTION‼ New - CVE-2018-5951
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-20347
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-20343
📖 Read
via "National Vulnerability Database".
Multiple buffer overflow vulnerabilities have been found in Ken Silverman Build Engine 1. An attacker could craft a special map file to execute arbitrary code when the map file is loaded.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-19798
📖 Read
via "National Vulnerability Database".
Fleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidents_add.php?submit=1 URI, as demonstrated by the value_Images_1 field, which leads to remote command execution on the remote server. Any authenticated user can exploit this.📖 Read
via "National Vulnerability Database".
🔐 CrowdStrike's 2020 Threat Report: Spammers finetune email thread hijacking 🔐
📖 Read
via "Security on TechRepublic".
Existing controls are often not configured properly or deployed widely, allowing bad actors to steal data.📖 Read
via "Security on TechRepublic".
TechRepublic
CrowdStrike's 2020 Threat Report: Spammers fine-tune email thread hijacking
Existing controls are often not configured properly or deployed widely, allowing bad actors to steal data.
⚠ XSS plugin vulnerabilities plague WordPress users ⚠
📖 Read
via "Naked Security".
Thousands of active WordPress plugins have been hit with a swathe of XSS vulnerabilities that could give attackers complete control of the site.📖 Read
via "Naked Security".
Naked Security
XSS plugin vulnerabilities plague WordPress users
Thousands of active WordPress plugins have been hit with a swathe of XSS vulnerabilities that could give attackers complete control of the site.
⚠ Nvidia patches severe flaws affecting GeForce, Quadro NVS and Tesla ⚠
📖 Read
via "Naked Security".
In all, the update covers five Windows and Linux desktop CVE vulnerabilities, including one rated as critical.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
❌ DoppelPaymer Ransomware Used to Steal Data from Supplier to SpaceX, Tesla ❌
📖 Read
via "Threatpost".
Cyber attack at Visser Precision, which builds custom parts for the aerospace and automotive industries, reveals sensitive company data.📖 Read
via "Threatpost".
Threat Post
DoppelPaymer Ransomware Used to Steal Data from Supplier to SpaceX, Tesla
Cyber attack at Visser Precision, which builds custom parts for the aerospace and automotive industries, reveals sensitive company data.
⚠ GoodRx stops sharing personal medical data with Google, Facebook ⚠
📖 Read
via "Naked Security".
The mobile app saves people money but was letting 20 companies know who's taking antipsychotics, erectile dysfunction and HIV meds, and more.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Huge flaw found in how facial features are measured from images ⚠
📖 Read
via "Naked Security".
It has to do with optics: faces appear to flatten out as we get further away. Our brains compensate, but AI-run facial recognition doesn't.📖 Read
via "Naked Security".
Naked Security
Huge flaw found in how facial features are measured from images
It has to do with optics: faces appear to flatten out as we get further away. Our brains compensate, but AI-run facial recognition doesn’t.
🕴 How Security Leaders at Starbucks and Microsoft Prepare for Breaches 🕴
📖 Read
via "Dark Reading: ".
Executives discuss the security incidents they're most worried about and the steps they take to prepare for them.📖 Read
via "Dark Reading: ".
Darkreading
How Security Leaders at Starbucks and Microsoft Prepare for Breaches
Executives discuss the security incidents they're most worried about and the steps they take to prepare for them.
⚠ Digital piggy bank sevice broken into by cybercrooks ⚠
📖 Read
via "Naked Security".
A financial proivider that gives loans but locks them down to turn them into savings... didn't lock down its own network.📖 Read
via "Naked Security".
Naked Security
Digital piggy bank sevice broken into by cybercrooks
A financial proivider that gives loans but locks them down to turn them into savings… didn’t lock down its own network.
🕴 The Cybercrime Pandemic Keeps Spreading 🕴
📖 Read
via "Dark Reading: ".
The World Economic Forum says cyberattacks will be one of the top global business risks over the next 10 years.📖 Read
via "Dark Reading: ".
Darkreading
The Cybercrime Pandemic Keeps Spreading
The World Economic Forum says cyberattacks will be one of the top global business risks over the next 10 years.
🔐 How to create a Linux user that cannot log in 🔐
📖 Read
via "Security on TechRepublic".
For security reasons, you might need to create a Linux user without the ability to log in. Jack Wallen shows you how.📖 Read
via "Security on TechRepublic".
TechRepublic
How to create a Linux user that cannot log in
For security reasons, you might need to create a Linux user without the ability to log in. Jack Wallen shows you how.
🕴 Chinese Nationals Charged with Laundering $100M in Cryptocurrency 🕴
📖 Read
via "Dark Reading: ".
The two defendants allegedly laundered $100 million for the benefit of North Korean threat actors who stole the funds in 2018.📖 Read
via "Dark Reading: ".
Dark Reading
Chinese Nationals Charged with Laundering $100M in Cryptocurrency
The two defendants allegedly laundered $100 million for the benefit of North Korean threat actors who stole the funds in 2018.
🔐 Cybercriminals and drug cartels are teaming up to spread malware and steal financial information across Latin America 🔐
📖 Read
via "Security on TechRepublic".
Drug cartels are using cryptocurrency and partnering with hackers to scam banks in Latin American banks.📖 Read
via "Security on TechRepublic".
🔐 Data security: 5 problems and solutions 🔐
📖 Read
via "Security on TechRepublic".
When it comes to securing data, most enterprises are negligent and unaware, according to a Lepide report.📖 Read
via "Security on TechRepublic".
TechRepublic
Data security: 5 problems and solutions
When it comes to securing data, most enterprises are negligent and unaware, according to a Lepide report.
❌ Have I Been Pwned No Longer For Sale ❌
📖 Read
via "Threatpost".
Troy Hunt said the popular HIBP will continue to be run as an independent service.📖 Read
via "Threatpost".
Threat Post
Have I Been Pwned No Longer For Sale
Troy Hunt said the popular HIBP will continue to be run as an independent service.
🛠 Golden Frieza 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Imagine finding yourself in a "hostile" environment, one where you cannot run exploits, tools, and applications without worrying about prying eyes spying on you, be they a legitimate system administrator, a colleague sharing an access with you or a software solution that scans the machine you are logged in to for malicious files. Your binary should live in encrypted form in the filesystem so that no static analysis would be possible even if identified and copied somewhere else. It should be only decrypted on the fly in memory when executed, so preventing dynamic analysis too, unless the decryption key is known. To experiment with such an idea Red Timmy Sec have created the "golden frieza" project.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Golden Frieza ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
⚠ Why ‘free’ Wi-Fi isn’t really free ⚠
📖 Read
via "Naked Security".
How much data is too much to give away to get online while you're waiting at the train station? In the airport? A shopping mall?📖 Read
via "Naked Security".
Naked Security
Why ‘free’ Wi-Fi isn’t really free
How much data is too much to give away to get online while you’re waiting at the train station? In the airport? A shopping mall?
🕴 Former Microsoft Software Engineer Convicted of Fraud 🕴
📖 Read
via "Dark Reading: ".
The 25-year-old was convicted of 18 charges stemming from illegal access to money stored in online gift cards.📖 Read
via "Dark Reading: ".
Darkreading
Former Microsoft Software Engineer Convicted of Fraud
The 25-year-old was convicted of 18 charges stemming from illegal access to money stored in online gift cards.