❌ Government VPN Servers Targeted in Zero-Day Attack ❌
📖 Read
via "Threatpost".
The attacks are being carried out against Chinese government interests worldwide, according to Qihoo 360.📖 Read
via "Threatpost".
Threat Post
Government VPN Servers Targeted in Zero-Day Attack
The attacks are being carried out against Chinese government interests worldwide, according to Qihoo 360.
🕴 Why Humans Are Phishing's Weakest Link 🕴
📖 Read
via "Dark Reading: ".
And it's not just because they click when they shouldn't... they also leave a trail of clues and details that make them easy to spoof📖 Read
via "Dark Reading: ".
Dark Reading
Why Humans Are Phishing's Weakest Link
And it's not just because they click when they shouldn't... they also leave a trail of clues and details that make them easy to spoof
🔐 Quantum encryption: How it works 🔐
📖 Read
via "Security on TechRepublic".
Futurist Isaac Arthur explains how to stay safe from quantum encryption hacking.📖 Read
via "Security on TechRepublic".
TechRepublic
Quantum encryption: How it works
Futurist Isaac Arthur explains how to stay safe from quantum encryption hacking.
🔐 Quantum encryption: How it works 🔐
📖 Read
via "Security on TechRepublic".
Futurist Isaac Arthur explains how to stay safe from quantum encryption hacking.📖 Read
via "Security on TechRepublic".
TechRepublic
Quantum encryption: How it works
Futurist Isaac Arthur explains how to stay safe from quantum encryption hacking.
ATENTION‼ New - CVE-2019-19699
📖 Read
via "National Vulnerability Database".
There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. To exploit the vulnerability, someone must have Admin access to the Centreon Web Interface and create a custom main.php?p=60803&type=3 command. The user must then set the Pollers Post-Restart Command to this previously created command via the main.php?p=60901&o=c&server_id=1 URI. This is triggered via an export of the Poller Configuration.📖 Read
via "National Vulnerability Database".
🔏 Senators Question Apple About New COVID-19 App Privacy 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Senators, just like they did when Google announced plans to use its technology to screen for COVID-19, have some privacy questions for Apple, which recently said it will do the same, via a website and app.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Senators Question Apple About New COVID-19 App Privacy
Senators, just like they did when Google announced plans to use its technology to screen for COVID-19, have some privacy questions for Apple, which recently said it will do the same, via a website and app.
❌ Apple Safari Flaws Enable One-Click Webcam Access ❌
📖 Read
via "Threatpost".
The white hat hacker who discovered the vulnerabilities received a $75,000 from Apple's bug-bounty program.📖 Read
via "Threatpost".
Threat Post
Apple Safari Flaws Enable One-Click Webcam Access
The white-hat hacker who discovered the vulnerabilities received a $75,000 from Apple's bug-bounty program.
🕴 FBI Warns of BEC Dangers 🕴
📖 Read
via "Dark Reading: ".
A new PSA warns of attacks launched against users of two popular cloud-based email systems.📖 Read
via "Dark Reading: ".
Dark Reading
FBI Warns of BEC Dangers
A new PSA warns of attacks launched against users of two popular cloud-based email systems.
🔐 How to sync Firefox containers across devices 🔐
📖 Read
via "Security on TechRepublic".
If you make use of the Firefox Multi-Container Account add-on, it now includes the ability to sync your customizations across your Firefox account.📖 Read
via "Security on TechRepublic".
TechRepublic
How to sync Firefox containers across devices
If you make use of the Firefox Multi-Container Account add-on, it now includes the ability to sync your customizations across your Firefox account.
🔐 How to enable 2FA for groups in Nextcloud 🔐
📖 Read
via "Security on TechRepublic".
Nextcloud allows you to enforce groups to use two-factor authentication. Let's find out how to create a group and then add them to 2FA enforcement.📖 Read
via "Security on TechRepublic".
TechRepublic
How to enable 2FA for groups in Nextcloud
Nextcloud allows you to enforce groups to use two-factor authentication. Let's find out how to create a group and then add them to 2FA enforcement.
❌ FBI Threatens ‘Zoom Bombing’ Trolls With Jail Time ❌
📖 Read
via "Threatpost".
The FBI is cracking down on the practice of Zoom bombing, saying the hijacking of web conferences can be punishable by jail time.📖 Read
via "Threatpost".
Threat Post
FBI Threatens ‘Zoom Bombing’ Trolls With Jail Time
The FBI is cracking down on the practice of Zoom bombing, saying the hijacking of web conferences can be punishable by jail time.
❌ A Brisk Private Trade in Zero-Days Widens Their Use ❌
📖 Read
via "Threatpost".
More zero-day exploits coming up for sale by NSO Group and others is democratizing the attack vector and placing them within reach of less sophisticated attackers.📖 Read
via "Threatpost".
Threat Post
A Brisk Private Trade in Zero-Days Widens Their Use
More zero-day exploits coming up for sale by NSO Group and others is democratizing the attack vector and placing them within reach of less sophisticated attackers.
🔐 5 ways to prevent Zoom bombing 🔐
📖 Read
via "Security on TechRepublic".
Learn how to prevent internet trolls from crashing your Zoom video conferences and flooding them with inappropriate content.📖 Read
via "Security on TechRepublic".
TechRepublic
How to prevent Zoom bombing: 5 simple tips
Internet trolls are crashing Zoom video conferences and flooding them with inappropriate content. Here are easy ways to protect your meetings from Zoom bombers.
🕴 Microsoft: Emotet Attack Shut Down an Entire Business Network 🕴
📖 Read
via "Dark Reading: ".
The infection started with a phishing email and spread throughout the organization, overheating all machines and flooding its Internet connection.📖 Read
via "Dark Reading: ".
Darkreading
Microsoft: Emotet Attack Shut Down an Entire Business Network
The infection started with a phishing email and spread throughout the organization, overheating all machines and flooding its Internet connection.
🕴 Misconfigured Containers Again Targeted by Cryptominer Malware 🕴
📖 Read
via "Dark Reading: ".
An attack group is searching for insecure containers exposing the Docker API and then installing a program that attempts to mine cryptocurrency. It's not the first time.📖 Read
via "Dark Reading: ".
Dark Reading
Misconfigured Containers Again Targeted by Cryptominer Malware
An attack group is searching for insecure containers exposing the Docker API and then installing a program that attempts to mine cryptocurrency. It's not the first time.
🕴 More Attackers Have Begun Using Zero-Day Exploits 🕴
📖 Read
via "Dark Reading: ".
Vendors of offensive cyber tools have made it easy for any threat group with the right funds to leverage unpatched bugs, FireEye says.📖 Read
via "Dark Reading: ".
Darkreading
More Attackers Have Begun Using Zero-Day Exploits
Vendors of offensive cyber tools have made it easy for any threat group with the right funds to leverage unpatched bugs, FireEye says.
⚠ Thousands of Android apps contain undocumented backdoors, study finds ⚠
📖 Read
via "Naked Security".
A study has found that thousands of legitimate Android apps are taking liberties or installing with capabilities that users wouldn’t expect to exist.📖 Read
via "Naked Security".
Naked Security
Thousands of Android apps contain undocumented backdoors, study finds
A study has found that thousands of legitimate Android apps are taking liberties or installing with capabilities that users wouldn’t expect to exist.
🕴 9 Security Podcasts Worth Tuning In To 🕴
📖 Read
via "Dark Reading: ".
Recommendations for podcasts discussing news, trends, guidance, and stories across the cybersecurity industry.📖 Read
via "Dark Reading: ".
Dark Reading
9 Security Podcasts Worth Tuning In To
Recommendations for podcasts discussing news, trends, guidance, and stories across the cybersecurity industry.
⚠ Two schoolkids sue Google for collecting biometrics ⚠
📖 Read
via "Naked Security".
The suit is about biometrics and children's privacy in Google's education apps, which are suddenly, wildly popular now due to COVID-19.📖 Read
via "Naked Security".
Naked Security
Two schoolkids sue Google for collecting biometrics
The suit is about biometrics and children’s privacy in Google’s education apps, which are suddenly, wildly popular now due to COVID-19.
⚠ Twitter warns users – Firefox might hold on to private messages ⚠
📖 Read
via "Naked Security".
Whose fault was it - Twitter or Firefox? (It's fixed now, to be clear.)📖 Read
via "Naked Security".
Naked Security
Twitter warns users – Firefox might retain private messages
Whose fault was it – Twitter or Firefox? (It’s fixed now, to be clear.)