🕴 Attack Surface Area Larger Than Most Businesses Believe 🕴
📖 Read
via "Dark Reading: ".
Workers are not the only outside-the-perimeter security risk. Companies have a variety of vulnerable Internet-facing resources exposing their business to risk, study finds.📖 Read
via "Dark Reading: ".
Dark Reading
Attack Surface Area Larger Than Most Businesses Believe
Workers are not the only outside-the-perimeter security risk. Companies have a variety of vulnerable Internet-facing resources exposing their business to risk, study finds.
🔐 Apple's Face ID: Cheat sheet 🔐
📖 Read
via "Security on TechRepublic".
If you're using an Apple mobile device manufactured since 2017, it has likely ditched Touch ID in favor of Face ID. Here's what you need to know about the latest Apple biometric security product.📖 Read
via "Security on TechRepublic".
TechRepublic
Apple’s Face ID Cheat Sheet: What It Is and How to Use It
Apple's Face ID is a secure and convenient facial recognition feature that utilizes TrueDepth cameras for fast, reliable and secure access.
🕴 'Highly Active' APT Group Targeting Microsoft Office, Outlook 🕴
📖 Read
via "Dark Reading: ".
The Gamaredon group has ramped up activity in recent months and makes no effort to stay under the radar, researchers report.📖 Read
via "Dark Reading: ".
Darkreading
'Highly Active' APT Group Targeting Microsoft Office, Outlook
The Gamaredon group has ramped up activity in recent months and makes no effort to stay under the radar, researchers report.
🔐 Why coronavirus contact tracing apps face privacy and security challenges 🔐
📖 Read
via "Security on TechRepublic".
The apps have to balance the goal of greater accuracy vs. respecting the privacy of their users, according to Check Point Research.📖 Read
via "Security on TechRepublic".
TechRepublic
Why coronavirus contact tracing apps face privacy and security challenges
The apps have to balance the goal of greater accuracy vs. respecting the privacy of their users, according to Check Point Research.
ATENTION‼ New - CVE-2020-0136
📖 Read
via "National Vulnerability Database".
In multiple locations of Parcel.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-120078455📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0135
📖 Read
via "National Vulnerability Database".
In dump of RollbackManagerServiceImpl.java, there is a possible backup metadata exposure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150949837📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0134
📖 Read
via "National Vulnerability Database".
In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146052771📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0133
📖 Read
via "National Vulnerability Database".
In MockLocationAppPreferenceController.java, it is possible to mock the GPS location of the device due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145136060📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0132
📖 Read
via "National Vulnerability Database".
In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-139473816📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0131
📖 Read
via "National Vulnerability Database".
In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-151159638📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0129
📖 Read
via "National Vulnerability Database".
In SetData of btm_ble_multi_adv.cc, there is a possible out-of-bound write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123292010📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0128
📖 Read
via "National Vulnerability Database".
In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-123940919📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0127
📖 Read
via "National Vulnerability Database".
In AudioStream::decode of AudioGroup.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the phone process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140054506📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0126
📖 Read
via "National Vulnerability Database".
In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local code execution with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-137878930📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0124
📖 Read
via "National Vulnerability Database".
In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140237592📖 Read
via "National Vulnerability Database".
❌ Podcast: Would You Use A Contact-Tracing Coronavirus App? ❌
📖 Read
via "Threatpost".
Contact tracing apps for the coronavirus are being developed and tested globally as the world starts to re-open. Are the apps worth using to flatten the curve? Or do data privacy worries trump public health?📖 Read
via "Threatpost".
Threat Post
Podcast: Would You Use A Contact-Tracing Coronavirus App?
Contact tracing apps for the coronavirus are being developed and tested globally as the world starts to re-open. Are the apps worth using to flatten the curve? Or do data privacy worries trump public health?
⚠ Crooks hijack “Black Lives Matter” to spread zombie malware ⚠
📖 Read
via "Naked Security".
The email says it will let you have your say anonymously about Black Lives Matter.📖 Read
via "Naked Security".
Naked Security
Crooks hijack “Black Lives Matter” to spread zombie malware
The email says it will let you have your say anonymously about Black Lives Matter.
🛠 Haveged 1.9.10 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
haveged is a daemon that feeds the /dev/random pool on Linux using an adaptation of the HArdware Volatile Entropy Gathering and Expansion algorithm invented at IRISA. The algorithm is self-tuning on machines with cpuid support, and has been tested in both 32-bit and 64-bit environments. The tarball uses the GNU build mechanism, and includes self test targets and a spec file for those who want to build an RPM.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Haveged 1.9.10 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Siemens Teams Up in OT Endpoint Security 🕴
📖 Read
via "Dark Reading: ".
Machine language-based endpoint security collaboration with SparkCognition is the latest move by Siemens in security.📖 Read
via "Dark Reading: ".
Dark Reading
Siemens Teams Up in OT Endpoint Security
Machine language-based endpoint security collaboration with SparkCognition is the latest move by Siemens in security.
🕴 The Hitchhiker's Guide to Web App Pen Testing 🕴
📖 Read
via "Dark Reading: ".
Time on your hands and looking to learn about web apps? Here's a list to get you started.📖 Read
via "Dark Reading: ".
Dark Reading
The Hitchhiker's Guide to Web App Pen Testing
Time on your hands and looking to learn about web apps? Here's a list to get you started.
🔐 FBI warns about cybercriminals exploiting mobile banking apps 🔐
📖 Read
via "Security on TechRepublic".
With increased use, phony apps and banking trojans will try to steal account credentials, according to the FBI.📖 Read
via "Security on TechRepublic".
TechRepublic
FBI warns about cybercriminals exploiting mobile banking apps
With increased use, phony apps and banking trojans will try to steal account credentials, according to the FBI.