🕴 New Ransomware Variant Developed Entirely as Shellcode 🕴
📖 Read
via "Dark Reading: ".
PwndLocker is harder to detect than other crypto-malware, Crypsis Group says.📖 Read
via "Dark Reading: ".
Darkreading
New Ransomware Variant Developed Entirely as Shellcode
PwndLocker is harder to detect than other crypto-malware, Crypsis Group says.
⚠ IWD: biometrics, machine learning, privacy and being a woman in tech – Naked Security Podcast ⚠
📖 Read
via "Naked Security".
To celebrate International Women's Day we invite you to this all-female splinter episode.📖 Read
via "Naked Security".
Naked Security
IWD: biometrics, machine learning, privacy and being a woman in tech – Naked Security Podcast
To celebrate International Women’s Day we invite you to this all-female splinter episode.
ATENTION‼ New - CVE-2016-11021
📖 Read
via "National Vulnerability Database".
setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter.📖 Read
via "National Vulnerability Database".
⚠ Monday review – the hot 29 stories of the week ⚠
📖 Read
via "Naked Security".
From an ultrasonic attack on Siri and Google Assistant to the guy who hacked back at tech support scammers - and everything in between.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 29 stories of the week
From an ultrasonic attack on Siri and Google Assistant to the guy who hacked back at tech support scammers – and everything in between.
⚠ 99% of compromised Microsoft enterprise accounts lack MFA ⚠
📖 Read
via "Naked Security".
Cybercriminals compromise over a million Microsoft enterprise accounts each month as too few customers use multi-factor authentication.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Now you need a notarized document to get a .gov domain ⚠
📖 Read
via "Naked Security".
The US government is tightening its rules around the registration of government web domains to stop fraudsters impersonating government sites.📖 Read
via "Naked Security".
Naked Security
Now you need a notarized document to get a .gov domain
The US government is tightening its rules around the registration of government web domains to stop fraudsters impersonating government sites.
⚠ Microsoft: Turn off Memory Integrity if it’s causing problems ⚠
📖 Read
via "Naked Security".
Microsoft has finally clarified how users can fix a Windows security measure that has been causing hardware problems: turn it off.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🔐 How to install and use the NordPass password manager on Linux 🔐
📖 Read
via "Security on TechRepublic".
The makers of NordVPN have come out with a new version of their NordPass password manager. Find out how to install and use it.📖 Read
via "Security on TechRepublic".
TechRepublic
How to install and use the NordPass password manager on Linux
The makers of NordVPN have come out with a new version of their NordPass password manager. Find out how to install and use it.
🕴 Threat Awareness: A Critical First Step in Detecting Adversaries 🕴
📖 Read
via "Dark Reading: ".
One thing seems certain: Attackers are only getting more devious and lethal. Expect to see more advanced attacks.📖 Read
via "Dark Reading: ".
Darkreading
Threat Awareness: A Critical First Step in Detecting Adversaries
One thing seems certain: Attackers are only getting more devious and lethal. Expect to see more advanced attacks.
⚠ One billion Android smartphones racking up security flaws ⚠
📖 Read
via "Naked Security".
How long do Android devices continue to receive security updates after they’re purchased? The answer is: barely two years.📖 Read
via "Naked Security".
Naked Security
One billion Android smartphones racking up security flaws
How long do Android devices continue to receive security updates after they’re purchased? The answer is: barely two years.
🔐 Cyberattackers are delivering malware by using links from whitelisted sites 🔐
📖 Read
via "Security on TechRepublic".
Legitimate-looking links from OneDrive, Google Drive, iCloud, and Dropbox slip by standard security measures.📖 Read
via "Security on TechRepublic".
TechRepublic
Cyberattackers are delivering malware by using links from whitelisted sites
Legitimate-looking links from OneDrive, Google Drive, iCloud, and Dropbox slip by standard security measures.
❌ AMD Downplays CPU Threat Opening Chips to Data Leak Attacks ❌
📖 Read
via "Threatpost".
New side-channel attacks have been disclosed in AMD CPUs, however AMD said that they are not new.📖 Read
via "Threatpost".
Threat Post
AMD Downplays CPU Threat Opening Chips to Data Leak Attacks
New speculative execution attacks have been disclosed in AMD CPUs, however AMD said that they are not new.
🕴 WatchGuard Buys Panda Security for Endpoint Security Tech 🕴
📖 Read
via "Dark Reading: ".
In the long term, Panda Security's technologies will be integrated into the WatchGuard platform.📖 Read
via "Dark Reading: ".
Dark Reading
WatchGuard Buys Panda Security for Endpoint Security Tech
In the long term, Panda Security's technologies will be integrated into the WatchGuard platform.
ATENTION‼ New - CVE-2015-7968
📖 Read
via "National Vulnerability Database".
nwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2/nwbc/nwbc_ext2int/ URI.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-7344
📖 Read
via "National Vulnerability Database".
HikaShop Joomla Component before 2.6.0 has XSS via an injected payload[/caption].📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-7343
📖 Read
via "National Vulnerability Database".
JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter.📖 Read
via "National Vulnerability Database".
🕴 Malware Campaign Feeds on Coronavirus Fears 🕴
📖 Read
via "Dark Reading: ".
A new malware campaign that offers a "coronavirus map" delivers a well-known data-stealer.📖 Read
via "Dark Reading: ".
Dark Reading
Malware Campaign Feeds on Coronavirus Fears
A new malware campaign that offers a coronavirus map delivers a well-known data-stealer.
🛠 Richsploit RichFaces Exploitation Toolkit 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
This tool can be used to exploit vulnerable versions of RichFaces. It has payloads for 4 vulnerabilities that have been identified, which can lead to remote code execution via java deserialization and EL injection.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Richsploit RichFaces Exploitation Toolkit ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ Microsoft Exchange Server Flaw Exploited in APT Attacks ❌
📖 Read
via "Threatpost".
A vulnerability is Microsoft Exchange servers is being actively exploited by multiple APT groups, researchers warn.📖 Read
via "Threatpost".
Threat Post
Microsoft Exchange Server Flaw Exploited in APT Attacks
A vulnerability is Microsoft Exchange servers is being actively exploited by multiple APT groups, researchers warn.
⚠ It’s not a breach… it’s just that someone else has your data ⚠
📖 Read
via "Naked Security".
If you lose someone's data because of a configuration blunder that lets crooks in without any actual hacking... is that a "breach" or not?📖 Read
via "Naked Security".
Naked Security
It’s not a breach… it’s just that someone else has your data
If you lose someone’s data because of a configuration blunder that lets crooks in without any actual hacking… is that a “breach” or not?
ATENTION‼ New - CVE-2016-6918
📖 Read
via "National Vulnerability Database".
Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files. (📖 Read
via "National Vulnerability Database".