ATENTION‼ New - CVE-2016-7061
📖 Read
via "National Vulnerability Database".
An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-7056
📖 Read
via "National Vulnerability Database".
A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-7041
📖 Read
via "National Vulnerability Database".
Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-7035
📖 Read
via "National Vulnerability Database".
An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain root access on the machine.📖 Read
via "National Vulnerability Database".
🔐 The secret to get employees to go back to school for cybersecurity: Pay their tuition 🔐
📖 Read
via "Security on TechRepublic".
With the growing need for cybersecurity professionals in the enterprise, sponsored tuition could help fill skill gaps, and 72% of workers are willing to go back to school for it.📖 Read
via "Security on TechRepublic".
TechRepublic
The secret to get employees to go back to school for cybersecurity: Pay their tuition
With the growing need for cybersecurity professionals in the enterprise, sponsored tuition could help fill skill gaps, and 72% of workers are willing to go back to school for it.
❌ ProtonVPN, NordVPN Flaws Open Door to Privilege Escalation ❌
📖 Read
via "The first stop for security news | Threatpost ".
The flaws disclosed this month are related to a critical bug previously discovered by VerSprite in April 2018.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
ProtonVPN, NordVPN Flaws Open Door to Privilege Escalation
The flaws disclosed this month are related to a critical bug previously discovered by VerSprite in April 2018.
🕴 GAO Says Equifax Missed Flaws, Intrusion in Massive Breach 🕴
📖 Read
via "Dark Reading: ".
A report from the Government Accountability Office details the issues found and opportunities missed in the huge 2017 Equifax data breach.📖 Read
via "Dark Reading: ".
Darkreading
GAO Says Equifax Missed Flaws, Intrusion in Massive Breach
A report from the Government Accountability Office details the issues found and opportunities missed in the huge 2017 Equifax data breach.
🕴 Three Trend Micro Apps Caught Collecting MacOS User Data 🕴
📖 Read
via "Dark Reading: ".
After researchers found the security apps collecting and uploading users' browser histories, Apple removed the apps from its macOS app store and Trend Micro removed the apps' browser history collection capability.📖 Read
via "Dark Reading: ".
Dark Reading
Three Trend Micro Apps Caught Collecting MacOS User Data
After researchers found the security apps collecting and uploading users' browser histories, Apple removed the apps from its macOS app store and Trend Micro removed the apps' browser history collection capability.
☢ Microsoft details for the first time how it classifies Windows security bugs ☢
📖 Read
via "Latest topics for ZDNet in Security".
The Microsoft Security Response Center publishes two documents detailing internal procedures used by its staff to prioritize and classify security bugs.📖 Read
via "Latest topics for ZDNet in Security".
ZDNET
Microsoft details for the first time how it classifies Windows security bugs
The Microsoft Security Response Center publishes two documents detailing internal procedures used by its staff to prioritize and classify security bugs.
🕴 New Campaign Brings Return of Old Malware 🕴
📖 Read
via "Dark Reading: ".
The Fallout exploit kit carries GandCrab into the Middle East in a new campaign.📖 Read
via "Dark Reading: ".
Dark Reading
Cyberattacks & Data Breaches recent news | Dark Reading
Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading
🕴 New 'Fallout' EK Brings Return of Old Ransomware 🕴
📖 Read
via "Dark Reading: ".
The Fallout exploit kit carries GandCrab into the Middle East in a new campaign.📖 Read
via "Dark Reading: ".
Darkreading
New 'Fallout' EK Brings Return of Old Ransomware
The Fallout exploit kit carries GandCrab into the Middle East in a new campaign.
☢ Tech support scammers find a home on Microsoft TechNet pages ☢
📖 Read
via "Latest topics for ZDNet in Security".
Security researchers finds over 3,000 TechNet pages flooded with tech support scams pushing shady phone numbers for cryptocurrency exchanges and social media platforms.📖 Read
via "Latest topics for ZDNet in Security".
ZDNET
Tech support scammers find a home on Microsoft TechNet pages
Security researcher finds over 3,000 TechNet pages flooded with tech support scams pushing shady phone numbers for cryptocurrency exchanges and social media platforms.
☢ Internet Architecture Board warns Australian encryption-busting laws could fragment the internet ☢
📖 Read
via "Latest topics for ZDNet in Security".
Industry groups, associations, and people that know what they are talking about, line up to warn of drawbacks from Canberra's proposed Assistance and Access Bill.📖 Read
via "Latest topics for ZDNet in Security".
ZDNet
Internet Architecture Board warns Australian encryption-busting laws could fragment the internet
Industry groups, associations, and people that know what they are talking about, line up to warn of drawbacks from Canberra's proposed Assistance and Access Bill.
☢ How the industry expects to secure information in a quantum world ☢
📖 Read
via "Latest topics for ZDNet in Security".
With all of the good a quantum computer promises, one of the side effects is that it will be able to break the mechanisms currently used to secure information. But the industry is onto it, and Australia's QuintessenceLabs is playing a key role.📖 Read
via "Latest topics for ZDNet in Security".
ZDNet
How the industry expects to secure information in a quantum world
With all of the good a quantum computer promises, one of the side effects is that it will be able to break the mechanisms currently used to secure information. But the industry is onto it, and Australia's QuintessenceLabs is playing a key role.
☢ Singapore payments vendor takes app global with UnionPay partnership ☢
📖 Read
via "Latest topics for ZDNet in Security".
Network for Electronic Transfers of Singapore (Nets) has inked an agreement with China's UnionPay to enable consumers to scan and pay for purchases at 7.5 million participating merchants worldwide.📖 Read
via "Latest topics for ZDNet in Security".
ZDNet
Singapore payments vendor takes app global with UnionPay partnership
Network for Electronic Transfers of Singapore (Nets) has inked an agreement with China's UnionPay to enable consumers to scan and pay for purchases at 7.5 million participating merchants worldwide.
☢ British Airways breach caused by the same group that hit Ticketmaster ☢
📖 Read
via "Latest topics for ZDNet in Security".
Security researchers find clues connecting the Magecart group to the breach at British Airways.📖 Read
via "Latest topics for ZDNet in Security".
ZDNET
British Airways breach caused by the same group that hit Ticketmaster
Security researchers find clues connecting the Magecart group to the breach at British Airways.
⚠ Microsoft extends security patch support for some Windows 7 users ⚠
📖 Read
via "Naked Security".
Microsoft will provide security updates until 2023 to help business customers migrate to Windows 10 - if they pay.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Keybase browser extension weakness discovered ⚠
📖 Read
via "Naked Security".
Respected researcher Wladimir Palant has recommended users “uninstall the Keybase browser extension ASAP” after discovering a gap in its end-to-end encryption.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
☢ How to steal a Tesla Model S in seconds ☢
📖 Read
via "Latest topics for ZDNet in Security".
An attack technique has been revealed which allows threat actors to unlock a Tesla vehicle in no time at all.📖 Read
via "Latest topics for ZDNet in Security".
ZDNET
How to steal a Tesla Model S in seconds
An attack technique has been revealed which allows threat actors to unlock a Tesla vehicle in no time at all.
☢ Trend Micro says sorry after apps grabbed Mac browser history ☢
📖 Read
via "Latest topics for ZDNet in Security".
The company has now removed a browser history data collection feature from its macOS products.📖 Read
via "Latest topics for ZDNet in Security".
ZDNet
Trend Micro says sorry after apps grabbed Mac browser history | ZDNet
The company has now removed a browser history data collection feature from its macOS products.
⚠ Yikes: 1 in 5 employees share their email passwords with coworkers ⚠
📖 Read
via "Naked Security".
19% of employees of small and medium-sized businesses share their passwords with coworkers or assistants, according to a recent survey.📖 Read
via "Naked Security".
Naked Security
Yikes: 1 in 5 employees share their email passwords with coworkers
19% of employees of small and medium-sized businesses share their passwords with coworkers or assistants, according to a recent survey.