πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
❌ ACLU Sues Clearview AI Over Faceprint Collection, Sale ❌

Watchdog group said company has violated the Illinois BIPA and β€˜will end privacy as we know it’ without intervention.

πŸ“– Read

via "Threatpost".
πŸ•΄ Zscaler Buys Edge Networks πŸ•΄

The acquisition is Zscaler's second major buy this quarter.

πŸ“– Read

via "Dark Reading: ".
❌ β€˜Hack-For-Hire’ Firms Spoof WHO To Target Google Credentials ❌

Google TAG report reveals that "hack for hire" firms are tapping into the coronavirus pandemic via WHO phishing lures.

πŸ“– Read

via "Threatpost".
πŸ€”1
πŸ•΄ All Links Are Safe ... Right? πŸ•΄

Today is a perfect day for a security breach.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Digital Distancing with Microsegmentation πŸ•΄

Physical distancing has blunted a virus's impact; the same idea can be applied to computers and networks to minimize breaches, attacks, and infections.

πŸ“– Read

via "Dark Reading: ".
πŸ” Phishing attack spoofs World Health Organization to steal email credentials πŸ”

The malicious campaign is aimed at people in general in an effort to grab their email addresses and passwords, says Abnormal Security.

πŸ“– Read

via "Security on TechRepublic".
⚠ Clearview AI facial recogition sued again – this time by ACLU ⚠

Clearview AI, the company that's scraped billions of images to build a facial recognition system, is getting sued again.

πŸ“– Read

via "Naked Security".
❌ NSA Warns of Sandworm Backdoor Attacks on Mail Servers ❌

The Russian spy group, a.k.a. BlackEnergy, is actively compromising Exim mail servers via a critical security vulnerability.

πŸ“– Read

via "Threatpost".
❌ NTT Communications Data Breach Affects Customers, Threatens Supply Chain ❌

Attackers managed to compromise NTT Communication’s Active Directory server and a construction information management server.

πŸ“– Read

via "Threatpost".
πŸ” Security at the network edge: Inside software-defined networking and Kubernetes πŸ”

Security concerns remain prominent across all network environments, with some unique to the network edge, SDN, and other services. Get some tips from industry insiders.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Cisco Announces Patches to SaltStack πŸ•΄

The patches came after Cisco was notified by the Salt Open Core team that the vulnerabilities and updates were available.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Abandoned Apps May Pose Security Risk to Mobile Devices πŸ•΄

Mobile providers don't often update users when applications are not supported by developers, security firm says.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2020-12675

The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to creation/retrieval/deletion of PHP template files, leading to Remote Code Execution. NOTE: this issue exists because of an incomplete fix for CVE-2020-12077.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2020-11018

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2020-11017

In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.

πŸ“– Read

via "National Vulnerability Database".
πŸ” With employees working from home, don't neglect the security of hard-copy files πŸ”

In the digital age, paper files--even those containing sensitive information--are not usually considered as high a security risk. Experts say that's a mistake.

πŸ“– Read

via "Security on TechRepublic".
❌ Steganography Anchors Pinpoint Attacks on Industrial Targets ❌

Ongoing spear-phishing attacks aim at stolen Windows credentials for ICS suppliers worldwide.

πŸ“– Read

via "Threatpost".
πŸ•΄ Bank of America Security Incident Affects PPP Applicants πŸ•΄

The incident occurred when Paycheck Protection Program applications were uploaded to a test platform and accidentally shared.

πŸ“– Read

via "Dark Reading: ".
πŸ” Friday Five: 5/29 Edition πŸ”

Costa Rica's state bank deals with hackers, North Dakota's contact tracing app causes controversy, Google issues warnings of government-backed attackers - catch up on all the week's news with the Friday Five.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
ATENTIONβ€Ό New - CVE-2020-11041

In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot upgrade to the patched version, a workaround is to disable sound for the session. This has been patched in 2.1.0.

πŸ“– Read

via "National Vulnerability Database".