ATENTION‼ New - CVE-2016-11025
📖 Read
via "National Vulnerability Database".
An issue was discovered on Samsung mobile devices with software through 2016-09-13 (Exynos AP chipsets). There is a memcpy heap-based buffer overflow in the OTP service. The Samsung ID is SVE-2016-7114 (December 2016).📖 Read
via "National Vulnerability Database".
🔐 Experts question abrupt decision by New York City to ban Zoom from use in all public schools 🔐
📖 Read
via "Security on TechRepublic".
The hotly debated move does little to address underlying issues many teachers and parents are having with the platform and other tools, educators say.📖 Read
via "Security on TechRepublic".
TechRepublic
Experts question abrupt decision by New York City to ban Zoom from use in all public schools
The hotly debated move does little to address underlying issues many teachers and parents are having with the platform and other tools, educators say.
🕴 The Coronavirus & Cybersecurity: 3 Areas of Exploitation 🕴
📖 Read
via "Dark Reading: ".
Criminal, political, and strategic factors are combining to create a perfect storm of cyber infections that target the global supply chain.📖 Read
via "Dark Reading: ".
Dark Reading
The Coronavirus & Cybersecurity: 3 Areas of Exploitation - Dark Reading
Criminal, political, and strategic factors are combining to create a perfect storm of cyber infections that target the global supply chain.
ATENTION‼ New - CVE-2017-18647
📖 Read
via "National Vulnerability Database".
An issue was discovered on Samsung mobile devices with M(6,x) and N(7.0) software. The TA Scrypto v1.0 implementation in Secure Driver has a race condition with a resultant buffer overflow. The Samsung IDs are SVE-2017-8973, SVE-2017-8974, and SVE-2017-8975 (November 2017).📖 Read
via "National Vulnerability Database".
🔏 NYDFS Postpones Cybersecurity Certification of Compliance Deadline 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
The New York Department of Financial Services has extended its usual April 15 cybersecurity Certification of Compliance deadline for entities experiencing issues arising from COVID-19📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
NYDFS Postpones Cybersecurity Certification of Compliance Deadline
The New York Department of Financial Services has extended its usual April 15 cybersecurity Certification of Compliance deadline for entities experiencing issues arising from COVID-19
🕴 Mature DevOps Teams Are Secure DevOps Teams 🕴
📖 Read
via "Dark Reading: ".
New research shows the relationship between mature DevOps processes, secure applications, and happy developers.📖 Read
via "Dark Reading: ".
Dark Reading
Mature DevOps Teams Are Secure DevOps Teams
New research shows the relationship between mature DevOps processes, secure applications, and happy developers.
🕴 How Do I Make Sure My Work-From-Home Users Install Updates? 🕴
📖 Read
via "Dark Reading: ".
Most enterprise endpoint solutions will support policies to enforce recommended updates.📖 Read
via "Dark Reading: ".
Dark Reading
How Do I Make Sure My Work-From-Home Users Install Updates?
Most enterprise endpoint solutions will support policies to enforce recommended updates.
ATENTION‼ New - CVE-2015-9545
📖 Read
via "National Vulnerability Database".
An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage() function in xdLocalStorage.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the confidentiality and integrity of data in the local storage of the vulnerable site via malicious web messages.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-9544
📖 Read
via "National Vulnerability Database".
An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage() function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the confidentiality and integrity of data in the local storage of the vulnerable site via malicious web messages.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-7488
📖 Read
via "National Vulnerability Database".
perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input.📖 Read
via "National Vulnerability Database".
❌ Serious Exchange Flaw Still Plagues 350K Servers ❌
📖 Read
via "Threatpost".
The Microsoft Exchange vulnerability was patched in February and has been targeted by several threat groups.📖 Read
via "Threatpost".
Threat Post
Serious Exchange Flaw Still Plagues 350K Servers
The Microsoft Exchange vulnerability was patched in February and has been targeted by several threat groups.
🕴 The Edge Names 'Holy Cow' Cartoon Caption Winners 🕴
📖 Read
via "Dark Reading: ".
What can cows possibly have to do with cybersecurity?📖 Read
via "Dark Reading: ".
Dark Reading
The Edge
What can cows possibly have to do with cybersecurity?
🕴 Cybercriminals Hide Malware & Phishing Sites Under SSL Certificates 🕴
📖 Read
via "Dark Reading: ".
More than half of the top 1 million websites use HTTPS, researchers report, but not all encrypted traffic is safe.📖 Read
via "Dark Reading: ".
Dark Reading
Cybercriminals Hide Malware & Phishing Sites Under SSL Certificates
More than half of the top 1 million websites use HTTPS, researchers report, but not all encrypted traffic is safe.
🕴 Chinese APT Groups Targeted Enterprise Linux Systems in Decade-Long Data Theft Campaign 🕴
📖 Read
via "Dark Reading: ".
Organizations across multiple industries compromised in a systematic effort to steal IP and other sensitive business data, BlackBerry says.📖 Read
via "Dark Reading: ".
Dark Reading
Chinese APT Groups Targeted Enterprise Linux Systems in Decade-Long Data Theft Campaign
Organizations across multiple industries compromised in a systematic effort to steal IP and other sensitive business data, BlackBerry says.
🕴 Privacy & Digital-Rights Experts Worry Contact-Tracing Apps Lack Limits 🕴
📖 Read
via "Dark Reading: ".
Mobile-phone-based tracking of people can help fight pandemics, but privacy and security researchers stress that it needs to be done right.📖 Read
via "Dark Reading: ".
Dark Reading
Privacy & Digital-Rights Experts Worry Contact-Tracing Apps Lack Limits
Mobile-phone-based tracking of people can help fight pandemics, but privacy and security researchers stress that it needs to be done right.
⚠ As if the world couldn’t get any weirder, this AI toilet scans your anus to identify you ⚠
📖 Read
via "Naked Security".
It's what the researchers call "A mountable toilet system for personalized health monitoring via the analysis of excreta."📖 Read
via "Naked Security".
Naked Security
As if the world couldn’t get any weirder, this AI toilet scans your anus to identify you
It’s what the researchers call “A mountable toilet system for personalized health monitoring via the analysis of excreta.”
⚠ Microsoft project proposed to aid Linux IoT code integrity ⚠
📖 Read
via "Naked Security".
Imagine a computer user from 2010 dreaming of a world in which Microsoft is not only an enthusiastic proponent of open source software but actively contributes to it with its own ideas. The time is now.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Update Firefox again – more RCEs and an Android “takeover” bug too ⚠
📖 Read
via "Naked Security".
Hot on the heels of Firefox's emergency update over the weekend are the four-weekly fixes that Mozilla had in train already. Get 'em now!📖 Read
via "Naked Security".
Naked Security
Update Firefox again – more RCEs and an Android “takeover” bug too
Hot on the heels of Firefox’s emergency update over the weekend are the four-weekly fixes that Mozilla had in train already. Get ’em now!
❌ COVID-19 CISO Checklist for Securing a Remote Workforce ❌
📖 Read
via "Threatpost".
The CISO Checklist for Secure Remote Working was built to assist CISOs in navigating through COVID-19, providing them with a concise, high-level list of the absolute essentials needed to ensure their organization is well protected in these challenging times.📖 Read
via "Threatpost".
Threat Post
COVID-19 CISO Checklist for Securing a Remote Workforce
The CISO Checklist for Secure Remote Working was built to assist CISOs in navigating through COVID-19, to ensure their organization is well-protected.
❌ ‘Fake Fingerprints’ Bypass Scanners with 3D Printing ❌
📖 Read
via "Threatpost".
New research used 3D printing technology to bypass fingerprint scanners, and tested it against Apple, Samsung and Microsoft mobile products.📖 Read
via "Threatpost".
Threat Post
‘Fake Fingerprints’ Bypass Scanners with 3D Printing
New research used 3D printing technology to bypass fingerprint scanners, and tested it against Apple, Samsung and Microsoft mobile products.
🔐 Talos researchers fabricate a fake that frequently fooled fingerprint locks 🔐
📖 Read
via "Security on TechRepublic".
The 3D printed duplicates worked on phone and a MacBook Pro laptop but not on Windows machines or two USB jump drives.📖 Read
via "Security on TechRepublic".
TechRepublic
Talos researchers fabricate a fake that frequently fooled fingerprint locks
The 3D printed duplicates worked on phone and a MacBook Pro laptop but not on Windows machines or two USB jump drives.