πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
❌ Phishing Attack Hits German Coronavirus Task Force ❌

More than 100 executives at a multinational company that's part of a German task force for creating coronavirus protective gear, were targeted in an ongoing phishing attack.

πŸ“– Read

via "Threatpost".
❌ SMBGhost RCE Exploit Threatens Corporate Networks ❌

The release of a PoC for the Windows flaw known as "SMBGhost" could set off cyberattack waves, CISA warned.

πŸ“– Read

via "Threatpost".
πŸ” Ransomware attack: Why a small business paid the $150,000 ransom πŸ”

The CFO of a small company that was the victim of a ransomware attack and reveals why they paid the ransom (in Bitcoin) to gain back control of their systems.

πŸ“– Read

via "Security on TechRepublic".
⚠ Double-crossing ransomware decryptor scrambles your files again! ⚠

Just when you thought a bad thing could get no worse...

πŸ“– Read

via "Naked Security".
πŸ•΄ Flaws Found in Some Open Source Projects Exploited More Often πŸ•΄

A study of major open source projects finds that 3.3% of vulnerabilities are exploited, but the rate of exploitation varies significantly.

πŸ“– Read

via "Dark Reading: ".
πŸ” Final Regulations For CCPA Sent For Review πŸ”

With CCPA enforcement on track for less than four weeks from now, California’s AG sent his final proposed regulations for the law to be reviewed.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
πŸ” Cyber incidents at NASA spiked 366% in 2019 πŸ”

While the agency experienced 1,468 incidents, its budget was decreased last year, according to a report by Atlas VPN.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Canada's Fitness Depot Alerts Customers to Data Breach πŸ•΄

The retailer reports cybercriminals infected its online store and used a fraudulent form to steal shoppers' information.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2019-19412

Some Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. The affected products and versions are: ALP-AL00B Versions earlier than 9.0.0.181(C00E87R2P20T8) ALP-L09 Versions earlier than 9.0.0.201(C432E4R1P9) ALP-L29 Versions earlier than 9.0.0.177(C185E2R1P12T8), Versions earlier than 9.0.0.195(C636E2R1P12) Anne-AL00 Versions earlier than 8.0.0.168(C00) BLA-AL00B Versions earlier than 9.0.0.181(C00E88R2P15T8) BLA-L09C Versions earlier than 9.0.0.177(C185E2R1P13T8), Versions earlier than 9.0.0.206(C432E4R1P11) BLA-L29C Versions earlier than 9.0.0.179(C576E2R1P7T8), Versions earlier than 9.0.0.194(C185E2R1P13), Versions earlier than 9.0.0.206(C432E4R1P11), Versions earlier than 9.0.0.210(C635E4R1P13) Berkeley-AL20 Versions earlier than 9.0.0.156(C00E156R2P14T8) Berkeley-L09 Versions earlier than 8.0.0.172(C432), Versions earlier than 8.0.0.173(C636) Emily-L29C Versions earlier than 9.0.0.159(C185E2R1P12T8), Versions earlier than 9.0.0.159(C461E2R1P11T8), Versions earlier than 9.0.0.160(C432E7R1P11T8), Versions earlier than 9.0.0.165(C605E2R1P12), Versions earlier than 9.0.0.168(C636E7R1P13T8), Versions earlier than 9.0.0.168(C782E3R1P11T8), Versions earlier than 9.0.0.196(C635E2R1P11T8) Figo-L03 Versions earlier than 9.1.0.130(C605E6R1P5T8) Figo-L21 Versions earlier than 9.1.0.130(C185E6R1P5T8), Versions earlier than 9.1.0.130(C635E6R1P5T8) Figo-L23 Versions earlier than 9.1.0.130(C605E6R1P5T8) Figo-L31 Versions earlier than 9.1.0.130(C432E8R1P5T8) Florida-L03 Versions earlier than 9.1.0.121(C605E5R1P1T8) Florida-L21 Versions earlier than 8.0.0.129(C605), Versions earlier than 8.0.0.131(C432), Versions earlier than 8.0.0.132(C185) Florida-L22 Versions earlier than 8.0.0.132(C636) Florida-L23 Versions earlier than 8.0.0.144(C605) HUAWEI P smart Versions earlier than 9.1.0.130(C185E6R1P5T8), Versions earlier than 9.1.0.130(C605E6R1P5T8) HUAWEI P smart, HUAWEI Y7s Versions earlier than 9.1.0.124(C636E6R1P5T8) HUAWEI P20 lite Versions earlier than 8.0.0.148(C635), Versions earlier than 8.0.0.155(C185), Versions earlier than 8.0.0.155(C605), Versions earlier than 8.0.0.156(C605), Versions earlier than 8.0.0.157(C432) HUAWEI nova 3e, HUAWEI P20 lite Versions earlier than 8.0.0.147(C461), Versions earlier than 8.0.0.148(ZAFC185), Versions earlier than 8.0.0.160(C185), Versions earlier than 8.0.0.160(C605), Versions earlier than 8.0.0.168(C432), Versions earlier than 8.0.0.172(C636) Honor View 10 Versions earlier than 9.0.0.202(C567E6R1P12T8) Leland-AL00A Versions earlier than 8.0.0.182(C00) Leland-L21A Versions earlier than 8.0.0.135(C185), Versions earlier than 9.1.0.118(C636E4R1P1T8) Leland-L22A Versions earlier than 9.1.0.118(C636E4R1P1T8) Leland-L22C Versions earlier than 9.1.0.118(C636E4R1P1T8) Leland-L31A Versions earlier than 8.0.0.139(C432)

πŸ“– Read

via "National Vulnerability Database".
❌ Singapore’s Contact Tracing Wearable Causes Privacy Backlash ❌

Thousands have signed a petition that underscores data privacy issues with Singapore's newly announced contact-tracing wearable, in development.

πŸ“– Read

via "Threatpost".
πŸ•΄ Chinese and Iranian APT Groups Targeted US Presidential Campaigns πŸ•΄

Google analysts report advanced persistent threat groups linked to China and Iran launched phishing attacks against the Biden and Trump campaigns.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ DARPA Launches Bug Bounty Program πŸ•΄

Unlike most crowdsourced vulnerability-hunting projects, this one is targeted at hardware defenses.

πŸ“– Read

via "Dark Reading: ".
πŸ” 10 takeaways from Mimecast's 2020 email security report πŸ”

Phishing is on the rise, ransomware continues to be a threat, and email exploits are more popular than ever. Here are the email security risks, and what you can do about them, in 2020.

πŸ“– Read

via "Security on TechRepublic".
⚠ Brave CEO apologises for adding affiliate links to URLs ⚠

The Brave browser has provoked unhappiness among some of its users after being caught redirecting searches to affiliate links that earned it commission.

πŸ“– Read

via "Naked Security".
πŸ” Security faux pas: 56% of employees use personal computers to WFH πŸ”

Using nonwork authorized tech at home places company data at risk, especially since 23% of employees are unsure what security protocols exist on their devices, Morphisec found.

πŸ“– Read

via "Security on TechRepublic".
πŸ” Cybercrime against retail brands is up 41% during pandemic πŸ”

A dramatic uptick in scams, counterfeiting, and hacking plague retail and e-commerce industries during the coronavirus crisis, as businesses try to define their new normal.

πŸ“– Read

via "Security on TechRepublic".
⚠ Cryptomining criminals under the spotlight – a SophosLabs report ⚠

A new SophosLabs report takes you inside a cryptomining gang.

πŸ“– Read

via "Naked Security".
πŸ•΄ CSO's Guide to 'Employee-First' Security Operations During COVID-19 & Beyond πŸ•΄

As the work-at-home environment continues to inform new ways of doing business, it's important that security teams remain flexible and ready for change.

πŸ“– Read

via "Dark Reading: ".
πŸ” A strong relationship between security and engineering teams accelerates the transition to DevSecOps πŸ”

Embracing an "everyone is part of the security team" approach shifts DevOps to DevSecOps, according to a report from Cobalt.io.

πŸ“– Read

via "Security on TechRepublic".
❌ Dark Basin Hack-For-Hire Group Targeted Thousands Over 7 Years ❌

Thousands of journalists, advocacy groups and politicians worldwide were targeted by Dark Basin.

πŸ“– Read

via "Threatpost".
πŸ•΄ Honda Pauses Production Due to Cyberattack πŸ•΄

The attack reportedly infected internal servers and forced Honda to halt production at plants around the world on Monday.

πŸ“– Read

via "Dark Reading: ".