πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
ATENTIONβ€Ό New - CVE-2017-18793

NETGEAR R7800 devices before 1.0.2.36 are affected by command injection.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2017-18792

NETGEAR D6100 devices before 1.0.0.50_0.0.50 are affected by command injection.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2017-18791

Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before 1.1.0.48, JNR1010v2 before 1.1.0.40, JWNR2010v5 before 1.1.0.40, WNR1000v4 before 1.1.0.40, WNR2020 before 1.1.0.40, WNR2050 before 1.1.0.40, WNR614 before 1.1.0.40, WNR618 before 1.1.0.40, and D7000 before 1.0.1.50.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2017-18790

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Researchers Use Microsoft Terminal Services Client in New Attack Method πŸ•΄

The technique would enable attackers to run malicious code via Remote Desktop Protocol using DLL side-loading to bypass security controls.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Automated Bots Are Increasingly Scraping Data & Attempting Logins πŸ•΄

The share of bot traffic to online sites declines, but businesses are seeing an overall increase in automated scraping of data, login attempts, and other detrimental activity.

πŸ“– Read

via "Dark Reading: ".
❌ Banking.BR Android Trojan Emerges in Credential-Stealing Attacks ❌

A new Android trojan targets banking customers with overlay attacks to steal their bank credentials and ultimately take over their accounts.

πŸ“– Read

via "Threatpost".
πŸ” COVID-19 contact tracing: The tricky balance between privacy and relief efforts πŸ”

As more governments consider the use of contact tracing apps to prevent the spread of coronavirus, researchers say privacy will have to be at the forefront of efforts in order for civilians to use it.

πŸ“– Read

via "Security on TechRepublic".
⚠ Gaming company targeted by Chinese Winnti hackers ⚠

Far from pausing operations during the COVID-19 pandemic, China’s notorious Winnti hacking group has been busy launching new attacks on targets, researchers say.

πŸ“– Read

via "Naked Security".
⚠ 309 million Facebook users’ phone numbers (and more) found online ⚠

First, 267m records were exposed & sold for 0.0002 cents each on the Dark Web. It was taken down but got reposted with yet more records.

πŸ“– Read

via "Naked Security".
πŸ” Zoom is introducing this new feature in its bid to banish Zoom bombing πŸ”

A new button allowing meeting participants to report users is Zoom's latest attempt to bring its security features up to scratch.

πŸ“– Read

via "Security on TechRepublic".
⚠ Porn scammers making $100,000 a month from sextortion emails ⚠

SophosLabs worked through five months’ worth of β€œporn scam” emails and followed the money. Learn what they found...

πŸ“– Read

via "Naked Security".
πŸ•΄ Domain Registrars Under Pressure to Combat COVID-19-Related Scams πŸ•΄

A huge increase in malicious website registrations has prompted concern from US lawmakers.

πŸ“– Read

via "Dark Reading: ".
❌ Small Businesses Tapping COVID-19 Loans Hit with Data Exposure ❌

The SBA said sensitive information about applicants may have been revealed to others applying for disaster loan program funds.

πŸ“– Read

via "Threatpost".
πŸ” How to better protect your organization against email threats πŸ”

As most generic spam now gets blocked, attackers have turned to more targeted, personalized phishing emails to reel in their victims, according to security firm Trustwave.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ 8 Steps to Enhance Government Agencies' Security Posture πŸ•΄

Given the heterogeneous architectures of critical state and local systems, it's imperative we learn from the security exposures of other critical infrastructure and pledge to be better

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ SBA Security Incident May Affect Nearly 8,000 Businesses πŸ•΄

Business owners who applied for federal disaster loans may have had information exposed to other applicants, the Small Business Administration reports.

πŸ“– Read

via "Dark Reading: ".
❌ Microsoft Issues Out-Of-Band Security Update For Office, Paint 3D ❌

The flaws exist in Autodesk's FBX library, integrated in Microsoft's Office, Office 365 ProPlus and Paint 3D applications.

πŸ“– Read

via "Threatpost".
πŸ•΄ Poll: Worried About Losing Your Job? πŸ•΄

With the unemployment rate surging due to COVID-19, are you concerned your job is in jeopardy?

πŸ“– Read

via "Dark Reading: ".
πŸ” Cyberattack on IT services giant Cognizant impacts clients πŸ”

The Maze ransomware group is believed to be responsible for the attack, and it typically blackmails victims by demanding payment to decrypt stolen files.

πŸ“– Read

via "Security on TechRepublic".