🛡 Cybersecurity & Privacy 🛡 - News
25.9K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
ATENTION New - CVE-2017-18738

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX6150v2 before 1.0.1.54, R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.10, R7000P before 1.2.0.22, R6900P before 1.2.0.22, R7100LG before 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.48, R8300 before 1.0.2.106, R8500 before 1.0.2.106, R6100 before 1.0.1.16, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.58.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18737

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, WNDR3700v5 before 1.1.0.48, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18736

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, and WNDR3700v5 before 1.1.0.48.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18735

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, and R6900v2 before 1.2.0.4.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18734

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, WNDR3700v5 before 1.1.0.48, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18733

Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.8, R6400 before 1.0.1.22, R6400v2 before 1.0.2.32, R7100LG before 1.0.0.32, R7300DST before 1.0.0.52, R8300 before 1.0.2.94, and R8500 before 1.0.2.100.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18732

Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14.

📖 Read

via "National Vulnerability Database".
🕴 How the Dark Web Fuels Insider Threats 🕴

New decentralized, criminal marketplaces and "as-a-service" offerings make it easy for employees to monetize their knowledge and access to enterprise networks and systems.

📖 Read

via "Dark Reading: ".
🕴 5 Ways to Prove Security's Worth in the Age of COVID-19 🕴

Tightened budgets are placing jobs at risk, but security pros say they're armed with ways to demonstrate that what they're doing merits keeping them employed.

📖 Read

via "Dark Reading: ".
🕴 Paay Misconfiguration Leaves Transaction Data Exposed 🕴

The New York-based credit-card processor left a server without password protection for approximately three weeks.

📖 Read

via "Dark Reading: ".
AI helps experts find thousands of child sexual abuse imagery keywords

For years, abusers have used complex keywords to covertly talk about imagery, but analysts have sussed out much of the secret code.

📖 Read

via "Naked Security".
🔐 "Reopen" domain name owners include a gun activist, a Good Samaritan, and potential spammers 🔐

DomainTools security analyst looked at 130 registrations that cover everything from reopenohio to reopendaycares.

📖 Read

via "Security on TechRepublic".
Shadow Broker leaked NSA files point to unknown APT group

A security researcher claims to have unearthed a previously-unknown APT group after reading the NSA files leaked by the Shadow Brokers in 2016.

📖 Read

via "Naked Security".
Patch now! Microsoft issues unexpected Office fix

You might not have heard of FBX files... but the latest Office versions support them, so don't neglect this patch!

📖 Read

via "Naked Security".
Apple Pushes Back Against Zero-Day Exploit Claims

Company said there is no evidence that iOS bugs revealed by ZecOps earlier this week were ever used against customers.

📖 Read

via "Threatpost".
🔐 Ransomware attacks against key sectors fall amidst coronavirus outbreak 🔐

Campaigns against government agencies, educational establishments, and healthcare providers aren't proving as successful as expected, says security firm Emsisoft.

📖 Read

via "Security on TechRepublic".
🔐 Coronavirus-themed phishing attacks aim to capture banking credentials 🔐

A malicious campaign analyzed by email security provider INKY spoofs the US Federal Reserve with promises of a government payment for those affected by COVID-19.

📖 Read

via "Security on TechRepublic".
🔐 World Health Organization has been the target of significant cyberattacks 🔐

The email addresses of about 450 active employees were leaked online this week along with thousands of others working on COVID-19 response, WHO said.

📖 Read

via "Security on TechRepublic".
🔐 Analysts: NFL Draft runs smoothly, but security concerns to persist through weekend 🔐

The NFL's first ever virtual draft went off without a hitch in the first round, but teams will have to be on watch through the six remaining rounds.

📖 Read

via "Security on TechRepublic".