πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
⚠ Google sued by Arizona for tracking users’ locations in spite of settings ⚠

Maps, weather, searches et al. suck up location data in the background, even if Tracking is turned off. Arizona says it's consumer fraud.

πŸ“– Read

via "Naked Security".
⚠ Windows 10 adds new security and privacy features in May update ⚠

Windows 10 release 2004 is out, with a slew of new features, including several updates to its security and privacy.

πŸ“– Read

via "Naked Security".
⚠ COVID-19 tests, PPE and antivirual drugs find a home on the dark web ⚠

COVID-19 testing kits, Hydroxychloroquine and PPE - it's all for sale on the dark web.

πŸ“– Read

via "Naked Security".
❌ ACLU Sues Clearview AI Over Faceprint Collection, Sale ❌

Watchdog group said company has violated the Illinois BIPA and β€˜will end privacy as we know it’ without intervention.

πŸ“– Read

via "Threatpost".
πŸ•΄ Zscaler Buys Edge Networks πŸ•΄

The acquisition is Zscaler's second major buy this quarter.

πŸ“– Read

via "Dark Reading: ".
❌ β€˜Hack-For-Hire’ Firms Spoof WHO To Target Google Credentials ❌

Google TAG report reveals that "hack for hire" firms are tapping into the coronavirus pandemic via WHO phishing lures.

πŸ“– Read

via "Threatpost".
πŸ€”1
πŸ•΄ All Links Are Safe ... Right? πŸ•΄

Today is a perfect day for a security breach.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Digital Distancing with Microsegmentation πŸ•΄

Physical distancing has blunted a virus's impact; the same idea can be applied to computers and networks to minimize breaches, attacks, and infections.

πŸ“– Read

via "Dark Reading: ".
πŸ” Phishing attack spoofs World Health Organization to steal email credentials πŸ”

The malicious campaign is aimed at people in general in an effort to grab their email addresses and passwords, says Abnormal Security.

πŸ“– Read

via "Security on TechRepublic".
⚠ Clearview AI facial recogition sued again – this time by ACLU ⚠

Clearview AI, the company that's scraped billions of images to build a facial recognition system, is getting sued again.

πŸ“– Read

via "Naked Security".
❌ NSA Warns of Sandworm Backdoor Attacks on Mail Servers ❌

The Russian spy group, a.k.a. BlackEnergy, is actively compromising Exim mail servers via a critical security vulnerability.

πŸ“– Read

via "Threatpost".
❌ NTT Communications Data Breach Affects Customers, Threatens Supply Chain ❌

Attackers managed to compromise NTT Communication’s Active Directory server and a construction information management server.

πŸ“– Read

via "Threatpost".
πŸ” Security at the network edge: Inside software-defined networking and Kubernetes πŸ”

Security concerns remain prominent across all network environments, with some unique to the network edge, SDN, and other services. Get some tips from industry insiders.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Cisco Announces Patches to SaltStack πŸ•΄

The patches came after Cisco was notified by the Salt Open Core team that the vulnerabilities and updates were available.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Abandoned Apps May Pose Security Risk to Mobile Devices πŸ•΄

Mobile providers don't often update users when applications are not supported by developers, security firm says.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2020-12675

The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to creation/retrieval/deletion of PHP template files, leading to Remote Code Execution. NOTE: this issue exists because of an incomplete fix for CVE-2020-12077.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2020-11018

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2020-11017

In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.

πŸ“– Read

via "National Vulnerability Database".
πŸ” With employees working from home, don't neglect the security of hard-copy files πŸ”

In the digital age, paper files--even those containing sensitive information--are not usually considered as high a security risk. Experts say that's a mistake.

πŸ“– Read

via "Security on TechRepublic".
❌ Steganography Anchors Pinpoint Attacks on Industrial Targets ❌

Ongoing spear-phishing attacks aim at stolen Windows credentials for ICS suppliers worldwide.

πŸ“– Read

via "Threatpost".