🔐 Infrared AI cameras at polling places could spot voters with a fever to detect potential coronavirus carriers 🔐
📖 Read
via "Security on TechRepublic".
Security company is using thermal imaging and AI to identify people with a temperature of 100 degrees.📖 Read
via "Security on TechRepublic".
TechRepublic
Infrared AI cameras could help spot coronavirus carriers at polling places
Security company is using thermal imaging and AI to identify people with a temperature of 100 degrees.
❌ Coronavirus Poll: Cyberattacks Ramp Up as Work from Home Takes Hold ❌
📖 Read
via "Threatpost".
A poll of Threatpost readers shows that security preparedness is uneven as organizations make an unprecedented transition to remote working.📖 Read
via "Threatpost".
Threat Post
Coronavirus Poll Results: Cyberattacks Ramp Up, WFH Prep Uneven
A poll of Threatpost readers shows that security preparedness is uneven as organizations make an unprecedented transition to remote working.
🕴 Misconfigured Elasticsearch Instance Exposes More Than 5 Billion Records 🕴
📖 Read
via "Dark Reading: ".
The collections contained information collected by a UK research firm on data breaches from the years 2012 to 2019.📖 Read
via "Dark Reading: ".
Darkreading
Misconfigured Elasticsearch Instance Exposes More Than 5 Billion Records
The collections contained information collected by a UK research firm on data breaches from the years 2012 to 2019.
⚠ ‘Dirty little secret’ extortion email threatens to give your family coronavirus ⚠
📖 Read
via "Naked Security".
...And it's got your password as "proof".📖 Read
via "Naked Security".
Naked Security
‘Dirty little secret’ extortion email threatens to give your family coronavirus
…And it’s got your password as “proof”.
ATENTION‼ New - CVE-2018-20335
📖 Read
via "National Vulnerability Database".
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APP_Installation.asp?= URI.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-20334
📖 Read
via "National Vulnerability Database".
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get shell.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-20333
📖 Read
via "National Vulnerability Database".
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB device is attached to the router and if there are apps installed on the router.📖 Read
via "National Vulnerability Database".
⚠ Location-tracking wristbands required on all incoming travelers to Hong Kong ⚠
📖 Read
via "Naked Security".
The government says the wristband isn't privacy-invading because it won't track your location, per se; just if you wander from COVID-19 quarantine.📖 Read
via "Naked Security".
Naked Security
Location-tracking wristbands required on all incoming travelers to Hong Kong
The government says the wristband isn’t privacy-invading because it won’t track your location, per se; just if you wander from COVID-19 quarantine.
⚠ COVID-19 disruption delays release of Chrome version 81 ⚠
📖 Read
via "Naked Security".
It’s the COVID-19 shortage nobody expected - not toilet rolls, tinned goods or headache pills this time but Google software engineers.📖 Read
via "Naked Security".
Naked Security
COVID-19 disruption delays release of Chrome version 81
It’s the COVID-19 shortage nobody expected – not toilet rolls, tinned goods or headache pills this time but Google software engineers.
❌ New Mirai Variant ‘Mukashi’ Targets Zyxel NAS Devices ❌
📖 Read
via "Threatpost".
The botnet exploits a vulnerability discovered last month that can allow threat actors to remotely compromise and control devices.📖 Read
via "Threatpost".
Threat Post
New Mirai Variant ‘Mukashi’ Targets Zyxel NAS Devices
The botnet exploits a vulnerability discovered last month that can allow threat actors to remotely compromise and control devices.
🕴 Attack Surface, Vulnerabilities Increase as Orgs Respond to COVID-19 Crisis 🕴
📖 Read
via "Dark Reading: ".
In typical fashion, attackers are gearing up to take advantage of the surge in teleworking prompted by the pandemic.📖 Read
via "Dark Reading: ".
Dark Reading
Attack Surface, Vulnerabilities Increase as Orgs Respond to COVID-19 Crisis
In typical fashion, attackers are gearing up to take advantage of the surge in teleworking prompted by the pandemic.
❌ Covid-19 Spurs Facial Recognition Tracking, Privacy Fears ❌
📖 Read
via "Threatpost".
The coronavirus pandemic is creating a lucrative market for facial recognition manufacturers. But privacy issues need to be top of mind, tech experts warn.📖 Read
via "Threatpost".
Threat Post
Covid-19 Spurs Facial Recognition Tracking, Privacy Fears
The coronavirus pandemic is creating a lucrative market for facial recognition manufacturers. But privacy issues need to be top of mind, tech experts warn.
🔏 Friday Five: 3/20 Edition 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Hackers take advantage of the COVID-19 pandemic, Magecart group targets NutriBullet, and many countries at risk for violating data privacy laws - catch up on the week's infosec news with this roundup!📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five: 3/20 Edition
Hackers take advantage of the COVID-19 pandemic, Magecart group targets NutriBullet, and many countries at risk for violating data privacy laws - catch up on the week's infosec news with this roundup!
🕴 Security Ratings Are a Dangerous Fantasy 🕴
📖 Read
via "Dark Reading: ".
They don't predict breaches, and they don't help people make valuable business decisions or make users any safer.📖 Read
via "Dark Reading: ".
Darkreading
Security Ratings Are a Dangerous Fantasy
They don't predict breaches, and they don't help people make valuable business decisions or make users any safer.
⚠ Exchange rate service’s customer details hacked via AWS ⚠
📖 Read
via "Naked Security".
Online exchange rate data provider Open Exchange Rates has exposed an undisclosed amount of user data via an Amazon database.📖 Read
via "Naked Security".
Naked Security
Exchange rate service’s customer details hacked via AWS
Online exchange rate data provider Open Exchange Rates has exposed an undisclosed amount of user data via an Amazon database.
🔐 TrickBot and Emotet strains make process injection most prevalent attack technique 🔐
📖 Read
via "Security on TechRepublic".
A Red Canary study analyzed six million leads to determine threats and found that worms had the most significant impact in 2019.📖 Read
via "Security on TechRepublic".
TechRepublic
TrickBot and Emotet strains make process injection most prevalent attack technique
A Red Canary study analyzed six million leads to determine threats and found that worms had the most significant impact in 2019.
🔐 Network address-based security: How to implement better controls 🔐
📖 Read
via "Security on TechRepublic".
Traditional network address-based security controls aren't as effective for the cloud or internal networks. Here's what to do about these security issues.📖 Read
via "Security on TechRepublic".
TechRepublic
Network address-based security: How to implement better controls
Traditional network address-based security controls aren't as effective for the cloud or internal networks. Here's what to do about these security issues.
ATENTION‼ New - CVE-2019-10221
📖 Read
via "National Vulnerability Database".
A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-10179
📖 Read
via "National Vulnerability Database".
A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery request search page, enabling a Reflected Cross Site Scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.📖 Read
via "National Vulnerability Database".
🔐 How to create a Kubernetes security policy 🔐
📖 Read
via "Security on TechRepublic".
If you're looking to take your Kubernetes security to the next level, you'll want to start working with pod security policies. Here's a quick introduction to this feature.📖 Read
via "Security on TechRepublic".
TechRepublic
How to create a Kubernetes security policy
If you're looking to take your Kubernetes security to the next level, you'll want to start working with pod security policies. Here's a quick introduction to this feature.
🕴 Proof of Concept Released for kr00k Wi-Fi Vulnerability 🕴
📖 Read
via "Dark Reading: ".
The code demonstrates a relatively simple method to exploit a vulnerability in more than a billion devices.📖 Read
via "Dark Reading: ".
Darkreading
Proof of Concept Released for kr00k Wi-Fi Vulnerability
The code demonstrates a relatively simple method to exploit a vulnerability in more than a billion devices.