⚠ Tor browser fixes bug that allows JavaScript to run when disabled ⚠
📖 Read
via "Naked Security".
The Tor browser has a bug that could allow JavaScript to execute on websites even when users think they’ve disabled it for maximum anonymity.📖 Read
via "Naked Security".
Naked Security
Tor browser fixes bug that allows JavaScript to run when disabled
The Tor browser has a bug that could allow JavaScript to execute on websites even when users think they’ve disabled it for maximum anonymity.
⚠ Slack fixes account-stealing bug ⚠
📖 Read
via "Naked Security".
Slack has fixed a bug that allowed attackers to hijack user accounts by tampering with their HTTP sessions.📖 Read
via "Naked Security".
Naked Security
Slack fixes account-stealing bug
Slack has fixed a bug that allowed attackers to hijack user accounts by tampering with their HTTP sessions.
🕴 Many Ransomware Attacks Can be Stopped Before They Begin 🕴
📖 Read
via "Dark Reading: ".
The tendency by many attackers to wait for the right time to strike gives defenders an opening, FireEye says.📖 Read
via "Dark Reading: ".
Darkreading
Many Ransomware Attacks Can be Stopped Before They Begin
The tendency by many attackers to wait for the right time to strike gives defenders an opening, FireEye says.
🛠 Lulzbuster 1.3.2 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Lulzbuster is a very fast and smart web directory and file enumeration tool written in C.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Lulzbuster 1.3.2 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🔐 CovidLock ransomware exploits coronavirus with malicious Android app 🔐
📖 Read
via "Security on TechRepublic".
The app promises access to a coronavirus map tracker but instead holds your contacts and other data for ransom, DomainTools found.📖 Read
via "Security on TechRepublic".
TechRepublic
CovidLock ransomware exploits coronavirus with malicious Android app
The app promises access to a coronavirus map tracker but instead holds your contacts and other data for ransom, DomainTools found.
🕴 Hellman & Friedman Acquires Checkmarx for $1.15B 🕴
📖 Read
via "Dark Reading: ".
The private equity firm will buy Checkmarx from Insight Partners, which will continue to own a minority interest.📖 Read
via "Dark Reading: ".
Dark Reading
Hellman & Friedman Acquires Checkmarx for $1.15B
The private equity firm will buy Checkmarx from Insight Partners, which will continue to own a minority interest.
🕴 Needed: A Cybersecurity Good Samaritan Law 🕴
📖 Read
via "Dark Reading: ".
Legislation should protect the good hackers who are helping to keep us safe, not just go after the bad.📖 Read
via "Dark Reading: ".
Darkreading
Needed: A Cybersecurity Good Samaritan Law
Legislation should protect the good hackers who are helping to keep us safe, not just go after the bad.
🕴 InfoSec Pros Uncertain About Relationships With Partner Security Teams 🕴
📖 Read
via "Dark Reading: ".
Only half of respondents to a recent Dark Reading study felt confident that their third-party business partners would, at least, tell them if a compromise occurred.📖 Read
via "Dark Reading: ".
Darkreading
InfoSec Pros Uncertain About Relationships With Partner Security Teams
Only half of respondents to a recent Dark Reading study felt confident that their third-party business partners would, at least, tell them if a compromise occurred.
🔐 Cybersecurity risks grow as thousands of federal employees shift to telecommuting 🔐
📖 Read
via "Security on TechRepublic".
The Trump administration has ordered hundreds of thousands of federal employees to be prepared to work from home full time and use VPNs to connect to government systems.📖 Read
via "Security on TechRepublic".
TechRepublic
Cybersecurity risks grow as thousands of federal employees shift to telecommuting
The Trump administration has ordered hundreds of thousands of federal employees to be prepared to work from home full time and use VPNs to connect to government systems.
❌ APT36 Taps Coronavirus as ‘Golden Opportunity’ to Spread Crimson RAT ❌
📖 Read
via "Threatpost".
The Pakistani-linked APT has been spotted infecting victims with data exfiltration malware.📖 Read
via "Threatpost".
Threat Post
APT36 Taps Coronavirus as ‘Golden Opportunity’ to Spread Crimson RAT
The Pakistani-linked APT has been spotted infecting victims with data exfiltration malware.
🔐 How to protect your organization from security threats amidst the rise in telecommuters 🔐
📖 Read
via "Security on TechRepublic".
Security becomes a greater challenge as more people work from home due to the coronavirus. Learn how to better protect your organization and employees.📖 Read
via "Security on TechRepublic".
TechRepublic
How to protect your organization from security threats amidst the rise in telecommuters
Security becomes a greater challenge as more people work from home due to the coronavirus. Learn how to better protect your organization and employees.
🕴 Remote Workforce Jumps 15% In Two Weeks 🕴
📖 Read
via "Dark Reading: ".
Netskope reports the total number of remote employees is the highest it has ever observed.📖 Read
via "Dark Reading: ".
Dark Reading
Remote Workforce Jumps 15% In Two Weeks
Netskope reports the total number of remote employees is the highest it has ever observed.
ATENTION‼ New - CVE-2019-11074
📖 Read
via "National Vulnerability Database".
A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files in arbitrary locations with SYSTEM privileges (although not controlling the contents of such files) due to insufficient sanitisation when passing arguments to the phantomjs.exe binary. In order to exploit the vulnerability, remote authenticated administrators need to create a new HTTP Full Web Page Sensor and set specific settings when executing the sensor.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21037
📖 Read
via "National Vulnerability Database".
Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password via the panel/members/edit/1 URI.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-18576
📖 Read
via "National Vulnerability Database".
The Hustle (aka wordpress-popup) plugin through 6.0.5 for WordPress allows Directory Traversal to obtain a directory listing via the views/admin/dashboard/ URI.📖 Read
via "National Vulnerability Database".
🕴 This Tax Season, Save the Scorn and Protect Customers from Phishing Scams 🕴
📖 Read
via "Dark Reading: ".
As security professionals, it's easy to get cynical about the continued proliferation of tax ID theft and blame the consumers themselves. But that doesn't help anyone.📖 Read
via "Dark Reading: ".
Dark Reading
This Tax Season, Save the Scorn and Protect Customers from Phishing Scams
As security professionals, it's easy to get cynical about the continued proliferation of tax ID theft and blame the consumers themselves. But that doesn't help anyone.
🕴 Security Lessons We've Learned (So Far) from COVID-19 🕴
📖 Read
via "Dark Reading: ".
Takeaways about fighting new fires, securely enabling remote workforces, and human nature during difficult times.📖 Read
via "Dark Reading: ".
Dark Reading
Security Lessons We've Learned (So Far) from COVID-19
Takeaways about fighting new fires, securely enabling remote workforces, and human nature during difficult times.
🔏 Canadian Govt Prioritizing Rules Around Insider Threats 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Following a high profile espionage case, Canada is set to roll out a new set of protocols designed to stop insider threats within government departments.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Canadian Govt Prioritizing Rules Around Insider Threats
Following a high profile espionage case, Canada is set to roll out a new set of protocols designed to stop insider threats within government departments.
🕴 Startup Offering Secure Access to Corporate Apps Emerges from Stealth 🕴
📖 Read
via "Dark Reading: ".
Axis Security has raised $17 million in VC funding.📖 Read
via "Dark Reading: ".
Dark Reading
Startup Offering Secure Access to Corporate Apps Emerges from Stealth
Axis Security has raised $17 million in VC funding.
🕴 Attorney General Directs DoJ to Prioritize Coronavirus Crime 🕴
📖 Read
via "Dark Reading: ".
Criminal activity related to the pandemic cannot be tolerated, William Barr states in memo.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading