ATENTION‼ New - CVE-2017-18802
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by command injection. This affects R6100 before 1.0.1.14, R7500 before 1.0.0.110, R7500v2 before 1.0.3.16, R7800 before 1.0.2.32, EX6200v2 before 1.0.1.50, and D7800 before 1.0.1.22.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18801
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.50, R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, WNDR3700v5 before 1.1.0.48, and D7000 before 1.0.1.50.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18800
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by reflected XSS. This affects R6700v2 before 1.1.0.42 and R6800 before 1.1.0.42.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18799
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6200v2 before 1.0.3.14, R6250 before 1.0.4.8, R6300v2 before 1.0.4.8, R6700 before 1.1.1.20, R7000 before 1.0.7.10, R7000P/R6900P before 1.0.0.56, R7100LG before 1.0.0.30, R7900 before 1.0.1.14, R8000 before 1.0.3.22, R8500 before 1.0.2.74, and D8500 before 1.0.3.28.📖 Read
via "National Vulnerability Database".
🛠 Faraday 3.11 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Faraday 3.11 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ NFL Tackles Cybersecurity Concerns Ahead of 2020 Draft Day ❌
📖 Read
via "Threatpost".
Researchers weigh in on potential security concerns surrounding the 2020 NFL Draft.📖 Read
via "Threatpost".
Threat Post
NFL Tackles Cybersecurity Concerns Ahead of 2020 Draft Day
Researchers weigh in on potential security concerns surrounding the 2020 NFL Draft.
ATENTION‼ New - CVE-2017-18798
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, D7000 before 1.0.1.50, and D1500 before 1.0.0.25.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18797
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.24, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18796
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by command injection. This affects R6400 before 1.0.1.24, R6700 before 1.0.1.26, R6900 before 1.0.1.28, R7000 before 1.0.9.10, R7000P before 1.0.1.16, R6900P before 1.0.1.16, and R7800 before 1.0.2.36.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18795
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.28 and D6100 before 1.0.0.50_0.0.50.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18794
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, R8500 before 1.0.2.100, and D6100 before 1.0.0.50_0.0.50.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18793
📖 Read
via "National Vulnerability Database".
NETGEAR R7800 devices before 1.0.2.36 are affected by command injection.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18792
📖 Read
via "National Vulnerability Database".
NETGEAR D6100 devices before 1.0.0.50_0.0.50 are affected by command injection.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18791
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before 1.1.0.48, JNR1010v2 before 1.1.0.40, JWNR2010v5 before 1.1.0.40, WNR1000v4 before 1.1.0.40, WNR2020 before 1.1.0.40, WNR2050 before 1.1.0.40, WNR614 before 1.1.0.40, WNR618 before 1.1.0.40, and D7000 before 1.0.1.50.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18790
📖 Read
via "National Vulnerability Database".
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.📖 Read
via "National Vulnerability Database".
🕴 Researchers Use Microsoft Terminal Services Client in New Attack Method 🕴
📖 Read
via "Dark Reading: ".
The technique would enable attackers to run malicious code via Remote Desktop Protocol using DLL side-loading to bypass security controls.📖 Read
via "Dark Reading: ".
Dark Reading
Endpoint Security recent news | Dark Reading
Explore the latest news and expert commentary on Endpoint Security, brought to you by the editors of Dark Reading
🕴 Automated Bots Are Increasingly Scraping Data & Attempting Logins 🕴
📖 Read
via "Dark Reading: ".
The share of bot traffic to online sites declines, but businesses are seeing an overall increase in automated scraping of data, login attempts, and other detrimental activity.📖 Read
via "Dark Reading: ".
Dark Reading
Automated Bots Are Increasingly Scraping Data & Attempting Logins
The share of bot traffic to online sites declines, but businesses are seeing an overall increase in automated scraping of data, login attempts, and other detrimental activity.
❌ Banking.BR Android Trojan Emerges in Credential-Stealing Attacks ❌
📖 Read
via "Threatpost".
A new Android trojan targets banking customers with overlay attacks to steal their bank credentials and ultimately take over their accounts.📖 Read
via "Threatpost".
Threat Post
Banking.BR Android Trojan Emerges in Credential-Stealing Attacks
A new Android trojan targets banking customers with overlay attacks to steal their bank credentials and ultimately take over their accounts.
🔐 COVID-19 contact tracing: The tricky balance between privacy and relief efforts 🔐
📖 Read
via "Security on TechRepublic".
As more governments consider the use of contact tracing apps to prevent the spread of coronavirus, researchers say privacy will have to be at the forefront of efforts in order for civilians to use it.📖 Read
via "Security on TechRepublic".
TechRepublic
COVID-19 contact tracing: The tricky balance between privacy and relief efforts
As more governments consider the use of contact tracing apps to prevent the spread of coronavirus, researchers say privacy will have to be at the forefront of efforts in order for civilians to use it.
⚠ Gaming company targeted by Chinese Winnti hackers ⚠
📖 Read
via "Naked Security".
Far from pausing operations during the COVID-19 pandemic, China’s notorious Winnti hacking group has been busy launching new attacks on targets, researchers say.📖 Read
via "Naked Security".
Naked Security
Gaming company targeted by Chinese Winnti hackers
Far from pausing operations during the COVID-19 pandemic, China’s notorious Winnti hacking group has been busy launching new attacks on targets, researchers say.
⚠ 309 million Facebook users’ phone numbers (and more) found online ⚠
📖 Read
via "Naked Security".
First, 267m records were exposed & sold for 0.0002 cents each on the Dark Web. It was taken down but got reposted with yet more records.📖 Read
via "Naked Security".
Naked Security
309 million Facebook users’ phone numbers found online
First, 267m records were exposed & sold for 0.0002 cents each on the Dark Web. It was taken down but got reposted with yet more records.