πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
⚠ Clearview AI facial recogition sued again – this time by ACLU ⚠

Clearview AI, the company that's scraped billions of images to build a facial recognition system, is getting sued again.

πŸ“– Read

via "Naked Security".
❌ NSA Warns of Sandworm Backdoor Attacks on Mail Servers ❌

The Russian spy group, a.k.a. BlackEnergy, is actively compromising Exim mail servers via a critical security vulnerability.

πŸ“– Read

via "Threatpost".
❌ NTT Communications Data Breach Affects Customers, Threatens Supply Chain ❌

Attackers managed to compromise NTT Communication’s Active Directory server and a construction information management server.

πŸ“– Read

via "Threatpost".
πŸ” Security at the network edge: Inside software-defined networking and Kubernetes πŸ”

Security concerns remain prominent across all network environments, with some unique to the network edge, SDN, and other services. Get some tips from industry insiders.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Cisco Announces Patches to SaltStack πŸ•΄

The patches came after Cisco was notified by the Salt Open Core team that the vulnerabilities and updates were available.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Abandoned Apps May Pose Security Risk to Mobile Devices πŸ•΄

Mobile providers don't often update users when applications are not supported by developers, security firm says.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2020-12675

The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to creation/retrieval/deletion of PHP template files, leading to Remote Code Execution. NOTE: this issue exists because of an incomplete fix for CVE-2020-12077.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2020-11018

In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. This has been fixed in 2.1.0.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2020-11017

In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.

πŸ“– Read

via "National Vulnerability Database".
πŸ” With employees working from home, don't neglect the security of hard-copy files πŸ”

In the digital age, paper files--even those containing sensitive information--are not usually considered as high a security risk. Experts say that's a mistake.

πŸ“– Read

via "Security on TechRepublic".
❌ Steganography Anchors Pinpoint Attacks on Industrial Targets ❌

Ongoing spear-phishing attacks aim at stolen Windows credentials for ICS suppliers worldwide.

πŸ“– Read

via "Threatpost".
πŸ•΄ Bank of America Security Incident Affects PPP Applicants πŸ•΄

The incident occurred when Paycheck Protection Program applications were uploaded to a test platform and accidentally shared.

πŸ“– Read

via "Dark Reading: ".
πŸ” Friday Five: 5/29 Edition πŸ”

Costa Rica's state bank deals with hackers, North Dakota's contact tracing app causes controversy, Google issues warnings of government-backed attackers - catch up on all the week's news with the Friday Five.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
ATENTIONβ€Ό New - CVE-2020-11041

In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot upgrade to the patched version, a workaround is to disable sound for the session. This has been patched in 2.1.0.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2020-11039

In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This has been patched in 2.1.0.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2020-11038

In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller size than requested due to an integer overflow in size calculation. With later messages, the server can manipulate the client to write data out of bound to the previously allocated buffer. This has been patched in 2.1.0.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2020-11019

In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.

πŸ“– Read

via "National Vulnerability Database".
πŸ” Zero trust security: A cheat sheet πŸ”

Zero trust means rethinking the safety of every bit of tech on a network. Learn five steps to building a zero trust environment.

πŸ“– Read

via "Security on TechRepublic".
πŸ” Social engineering: A cheat sheet for business professionals πŸ”

People, like computers, can be hacked using a process called social engineering, and there's a good chance a cybersecurity attack on your organization could start with this technique.

πŸ“– Read

via "Security on TechRepublic".
ATENTIONβ€Ό New - CVE-2020-11089

In FreeRDP before 2.1.0, there is an out-of-bound read in irp functions (parallel_process_irp_create, serial_process_irp_create, drive_process_irp_write, printer_process_irp_write, rdpei_recv_pdu, serial_process_irp_write). This has been fixed in 2.1.0.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2020-11088

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlm_read_NegotiateMessage. This has been fixed in 2.1.0.

πŸ“– Read

via "National Vulnerability Database".