ATENTION‼ New - CVE-2016-11022
📖 Read
via "National Vulnerability Database".
NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to login_handler.php.📖 Read
via "National Vulnerability Database".
🔐 Cybercriminals now recycling standard phishing emails with coronavirus themes 🔐
📖 Read
via "Security on TechRepublic".
The latest malicious COVID-19 campaigns are repurposing conventional phishing emails with a coronavirus angle, says security trainer KnowBe4.📖 Read
via "Security on TechRepublic".
TechRepublic
Cybercriminals now recycling standard phishing emails with coronavirus themes
The latest malicious COVID-19 campaigns are repurposing conventional phishing emails with a coronavirus angle, says security trainer KnowBe4.
🕴 FBI Warns of Fake CDC Emails in COVID-19 Phishing Alert 🕴
📖 Read
via "Dark Reading: ".
Fraudsters exploit concerns by claiming to offer virus-related information or promising stimulus checks.📖 Read
via "Dark Reading: ".
Darkreading
FBI Warns of Fake CDC Emails in COVID-19 Phishing Alert
Fraudsters exploit concerns by claiming to offer virus-related information or promising stimulus checks.
⚠ WhatsApp “Martinelli” hoax is back, warning about “Dance of the Pope” ⚠
📖 Read
via "Naked Security".
Two old WhatsApp hoaxes are back, with a grain-of-truth story in the middle to add a veneer of believability. Don't spread this stuff!📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🛠 Hyperion Runtime Encrypter 2.3 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Hyperion is a runtime encrypter for 32-bit and 64-bit portable executables. It is a reference implementation and bases on the paper "Hyperion: Implementation of a PE-Crypter".📖 Go!
via "Security Tool Files ≈ Packet Storm".
🛠 Mandos Encrypted File System Unattended Reboot Utility 1.8.10 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
The Mandos system allows computers to have encrypted root file systems and at the same time be capable of remote or unattended reboots. The computers run a small client program in the initial RAM disk environment which will communicate with a server over a network. All network communication is encrypted using TLS. The clients are identified by the server using an OpenPGP key that is unique to each client. The server sends the clients an encrypted password. The encrypted password is decrypted by the clients using the same OpenPGP key, and the password is then used to unlock the root file system.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Mandos Encrypted File System Unattended Reboot Utility 1.8.10 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🔐 How to protect your organization and remote workers against ransomware 🔐
📖 Read
via "Security on TechRepublic".
Phishing emails and unsecure remote desktop protocol access are two common types of attack methods used to spread ransomware, says cyber breach firm Beazley Breach Response Services.📖 Read
via "Security on TechRepublic".
TechRepublic
How to protect your organization and remote workers against ransomware
Phishing emails and unsecure remote desktop protocol access are two common types of attack methods used to spread ransomware, says cyber breach firm Beazley Breach Response Services.
❌ Microsoft Warns of Critical Windows Zero-Day Flaws ❌
📖 Read
via "Threatpost".
The unpatched Windows zero day flaws are being exploited in "limited, targeted" attacks, according to Microsoft.📖 Read
via "Threatpost".
Threat Post
Microsoft Warns of Critical Windows Zero-Day Flaws
The unpatched Windows zero day flaws are being exploited in "limited, targeted" attacks, according to Microsoft.
🔏 Ex-Google Engineer Pleads Guilty to Trade Secret Theft 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Ex-Google engineer Anthony Levandowski plead guilty to trade secret theft last week, acknowleding he took a sensitive Google file before joining Uber.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Ex-Google Engineer Pleads Guilty to Trade Secret Theft
Ex-Google engineer Anthony Levandowski plead guilty to trade secret theft last week, acknowleding he took a sensitive Google file before joining Uber.
❌ Hackers Actively Exploit 0-Day in CCTV Camera Hardware ❌
📖 Read
via "Threatpost".
Criminals behind botnets Chalubo, FBot and Moobot attack unpatched vulnerabilities in the commercial DVRs made by LILIN.📖 Read
via "Threatpost".
Threat Post
Hackers Actively Exploit 0-Day in CCTV Camera Hardware
Criminals behind botnets Chalubo, FBot and Moobot attack unpatched vulnerabilities in the commercial DVRs made by LILIN.
❌ Apache Tomcat Exploit Poised to Pounce, Stealing Files ❌
📖 Read
via "Threatpost".
Researchers said that a working exploit for CVE-2020-1938 leaked on GitHub makes is a snap to compromise webservers.📖 Read
via "Threatpost".
Threat Post
Apache Tomcat Exploit Poised to Pounce, Stealing Files
Researchers said that a working exploit for CVE-2020-1938 leaked on GitHub makes is a snap to compromise webservers.
🕴 538 Million Weibo Users' Info for Sale on Dark Web 🕴
📖 Read
via "Dark Reading: ".
The user data, which does not include passwords, purportedly comes from a mid-2019 breach.📖 Read
via "Dark Reading: ".
Darkreading
538 Million Weibo Users' Info for Sale on Dark Web
The user data, which does not include passwords, purportedly comes from a mid-2019 breach.
🕴 Three Ways Your BEC Defense Is Failing & How to Do Better 🕴
📖 Read
via "Dark Reading: ".
Business email compromises cost the economy billions of dollars. Experts have advice on how to stop them from hitting you for millions at a pop.📖 Read
via "Dark Reading: ".
Darkreading
Three Ways Your BEC Defense Is Failing & How to Do Better
Business email compromises cost the economy billions of dollars. Experts have advice on how to stop them from hitting you for millions at a pop.
🕴 Microsoft Publishes Advisory for Windows Zero-Day 🕴
📖 Read
via "Dark Reading: ".
There is no available patch for the vulnerabilities, which Microsoft says exist in all supported versions of Windows.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
⚠ Feds shut down bogus COVID-19 vaccine site ⚠
📖 Read
via "Naked Security".
A vaccine for $4.95!? Nah, we didn't think so, either. Shuttering the alleged rip-off site is the DOJ's 1st takedown of COVID-19 flimflam.📖 Read
via "Naked Security".
Naked Security
Feds shut down bogus COVID-19 vaccine site
A vaccine for $4.95!? Nah, we didn’t think so, either. Shuttering the alleged rip-off site is the DOJ’s 1st takedown of COVID-19 flimflam.
🕵 Top VPNs are recording users and potentially leaking their data when they visit their website 🕵
📖 Read
via "VPNpro".
📖 Read
via "VPNpro".
VPNpro
Top VPNs are recording users and potentially leaking their data when they visit their website
Our research uncovered that top VPN websites, valued for their privacy, are actually recording users and may be leaking their data. Find out who they are.
❤1
🔐 Microsoft Defender for Linux is coming. This is what you need to know 🔐
📖 Read
via "Security on TechRepublic".
Microsoft's security tools extend beyond the company's own platforms. While the ambition for Defender for Linux is broad, the first preview is aimed just at servers and does less than on Windows.📖 Read
via "Security on TechRepublic".
TechRepublic
Microsoft Defender for Linux is coming. This is what you need to know
Microsoft's security tools extend beyond the company's own platforms. While the ambition for Defender for Linux is broad, the first preview is aimed just at servers and does less than on Windows.
⚠ Russia’s FSB wanted its own IoT botnet ⚠
📖 Read
via "Naked Security".
If you thought the Mirai botnet was bad, what about a version under the control of Russia's military that it could point like an electronic cannon at people it didn't like?📖 Read
via "Naked Security".
Naked Security
Russia’s FSB wanted its own IoT botnet
If you thought the Mirai botnet was bad, what about a version under the control of Russia’s military that it could point like an electronic cannon at people it didn’t like?
⚠ Facebook Messenger may ban mass-forwarding of messages ⚠
📖 Read
via "Naked Security".
Facebook has done this before: it did it with WhatsApp, following an outbreak of lynchings sparked by viral social media hoaxes.📖 Read
via "Naked Security".
Naked Security
Facebook Messenger may ban mass-forwarding of messages
Facebook has done this before: it did it with WhatsApp, following an outbreak of lynchings sparked by viral social media hoaxes.
❌ Tekya Malware Threatens Millions of Android Users via Google Play ❌
📖 Read
via "Threatpost".
The ad-fraud malware lurks in dozens of childrens' and utilities apps.📖 Read
via "Threatpost".
Threat Post
Tekya Malware Threatens Millions of Android Users via Google Play
The ad-fraud malware lurks in dozens of childrens' and utilities apps.
❌ Domain Name Security: Important Measures You Need to Know ❌
📖 Read
via "Threatpost".
A domain name that points to a website hosting your generated content is still one of the most secure means to ensure that an online identity does not fall prey to hackers or hijackers.📖 Read
via "Threatpost".
Threat Post
Domain Name Security: Important Measures You Need to Know
A domain name that points to your generated content is still a secure means to ensure that an online identity does not fall prey to hackers or hijackers.