🛡 Cybersecurity & Privacy 🛡 - News
25.9K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕴 Remote Access Makes a Comeback: 4 Security Challenges in the Wake of COVID-19 🕴

As companies continue to support increasing numbers of work-from-home employees, the pressure to secure access and reduce risk has never been greater.

📖 Read

via "Dark Reading: ".
Maze ransomware hits US giant Cognizant

The latest company to fall victim to a ransomware attack is Cognizant, a large US IT services company which admitted at the weekend that it had fallen victim to Maze.

📖 Read

via "Naked Security".
ATENTION New - CVE-2017-18850

Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R6900P before 1.0.0.56, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R7100LG before 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.44, R8300 before 1.0.2.100_1.0.82, and R8500 before 1.0.2.100_1.0.82.

📖 Read

via "National Vulnerability Database".
Bitcoin Stealers Hide in 700+ Ruby Developer Libraries

Cybercriminals uploaded typosquatted malicious libraries to RubyGems, which contains open-source components that are used as basic application building blocks by software developers.

📖 Read

via "Threatpost".
🕴 COVID-19 Caption Contest Winners 🕴

It was a tough choice! And the winner is...

📖 Read

via "Dark Reading: ".
Foxit PDF Reader, PhantomPDF Open to Remote Code Execution

Foxit Reader and PhantomPDF are plagued by several high-severity flaws that, if exploited, could enable remote code execution.

📖 Read

via "Threatpost".
🔏 NYDFS Stresses Cybersecurity Awareness in COVID-19 Pandemic 🔏

In a reminder to regulated entities, the New York Department of Financial Services warned last week of a potential uptick in phishing, fraud, and third-party risk.

📖 Read

via "Subscriber Blog RSS Feed ".
🕴 IT Services Firm Cognizant Hit with Maze Ransomware 🕴

Cognizant is working with cyber defense firms and law enforcement to investigate the attack, disclosed April 17.

📖 Read

via "Dark Reading: ".
ATENTION New - CVE-2017-18849

Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.12, R6400 before 1.01.24, R6400v2 before 1.0.2.30, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R6900P before 1.0.0.56, R7000 before 1.0.9.4, R7000P before 1.0.0.56, R7100LG before 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.44, R8300 before 1.0.2.100_1.0.82, and R8500 before 1.0.2.100_1.0.82.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18848

Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.0.36, AC1450 before 1.0.0.36, R7300 before 1.0.0.54, and R8500 before 1.0.2.94.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18847

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and D8500 before 1.0.3.29.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18846

Certain NETGEAR devices are affected by a stack-based buffer overflow. This affects R6250 before 1.0.4.12, R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.100_1.0.82, R8500 before 1.0.2.100_1.0.82, and D8500 before 1.0.3.29.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18845

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38 and R6800 before 1.1.0.38.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18844

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, and D7000 before 1.0.1.50.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18843

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, and D7000 before 1.0.1.50.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18842

Certain NETGEAR devices are affected by CSRF. This affects R7300 before 1.0.0.54, R8500 before 1.0.2.94, DGN2200v1 before 1.0.0.55, and D2200D/D2200DW-1FRNAS before 1.0.0.32.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18841

Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.46, R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, WNDR3700v5 before 1.1.0.46, and D7000 before 1.0.1.50.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18840

Certain NETGEAR devices are affected by denial of service. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18839

Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.

📖 Read

via "National Vulnerability Database".
Maze Ransomware Attack Hits Cognizant

Cognizant has confirmed that a Friday evening Maze ransomware attack has disrupted its systems.

📖 Read

via "Threatpost".
Mootbot Botnet Targets Fiber Routers with Dual Zero-Days

Researchers saw several IoT botnets using one of the bugs in the wild after a proof-of-concept was published in March.

📖 Read

via "Threatpost".