πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
❌ Trojan Raids Android Users’ Cookie Jars ❌

Cookiethief steals cookies to infiltrate Facebook and other web service accounts.

πŸ“– Read

via "Threatpost".
❌ Researchers Warn of Novel PXJ Ransomware Strain ❌

While PXJ performs typical ransomware functions, it does not appear to share the same underlying code with most known ransomware families.

πŸ“– Read

via "Threatpost".
πŸ” Facebook cookie-stealing trojans surface on Android devices πŸ”

The trojans are designed to gain control of Facebook user accounts by capturing browser cookies in Android, says Kaspersky.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ New Report Shows Breach Costs Continuing to Grow πŸ•΄

The costs associated with data breaches climb alongside the amount of data managed by the enterprise according to the latest Global Protection Index Snapshot.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Russia-Based Turla APT Group's Infrastructure, Activity Traceable πŸ•΄

Threat actor's practice of using known malware and tactics gives an opening for defenders, says Recorded Future.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2018-20586

bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-19516

messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv="REFRESH" value.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-10704

yidashi yii2cmf 2.0 has XSS via the /search q parameter.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2017-18350

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-3641

bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a client application crash) via an "Easy" attack.

πŸ“– Read

via "National Vulnerability Database".
⚠ Confessions app Whisper spills almost a billion records ⚠

Researchers say the exposure includes exact locations of users' last posts, nicknames, age, and gender.

πŸ“– Read

via "Naked Security".
⚠ Homeland Security sued over secretive use of face recognition ⚠

As of June 2019, CBP had processed more than 20 million travelers using facial recognition, civil rights group ACLU says.

πŸ“– Read

via "Naked Security".
⚠ EARN IT Act threatens end-to-end encryption ⚠

The bill, which would undercut Section 230 protections for online publishing, presents itself as a way to stop online child abuse.

πŸ“– Read

via "Naked Security".
πŸ” Dang... How Did I Miss International Women’s Day on Sunday, March 8?! πŸ”

While there have been some successes when it comes to getting women involved in tech, by and large, we haven't made enough progress.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
❌ ACLU Sues Over U.S. Airport Facial-Recognition Technology ❌

Civil-liberties group wants more transparency about who the government is partnering with and how they are using the information gathered in biometric checks.

πŸ“– Read

via "Threatpost".
πŸ•΄ A Lesson in Social Engineering πŸ•΄

What kind of school project is this?

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2009-5159

Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Princess Cruises Confirms Data Breach πŸ•΄

The cruise liner, forced to shut down operations due to coronavirus, says the incident may have compromised passengers' personal data.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ What Cybersecurity Pros Really Think About Artificial Intelligence πŸ•΄

While there's a ton of unbounded optimism from vendor marketing and consultant types, practitioners are still reserving a lot of judgment.

πŸ“– Read

via "Dark Reading: ".