⚠ Congress wants to know who is using spyware against the US ⚠
📖 Read
via "Naked Security".
A 2021 intelligence funding draft bill mandates a report on surveillance vendors and which countries or other actors are using spyware.📖 Read
via "Naked Security".
Naked Security
Congress wants to know who is using spyware against the US
A 2021 intelligence funding draft bill mandates a report on surveillance vendors and which countries or other actors are using spyware.
ATENTION‼ New - CVE-2019-19112
📖 Read
via "National Vulnerability Database".
The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-19111
📖 Read
via "National Vulnerability Database".
The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-19110
📖 Read
via "National Vulnerability Database".
The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-19109
📖 Read
via "National Vulnerability Database".
The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-16848
📖 Read
via "National Vulnerability Database".
A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can lead to resource exhaustion culminating in a denial of service.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18869
📖 Read
via "National Vulnerability Database".
A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks.📖 Read
via "National Vulnerability Database".
⚠ You’ve heard of sextortion – now there’s “breachstortion”, too.. ⚠
📖 Read
via "Naked Security".
Sextortion again - but with "we hacked your website and stole all your data" instead of "we hacked your webcam and made a video".📖 Read
via "Naked Security".
Naked Security
You’ve heard of sextortion – now there’s “breachstortion”, too
Sextortion again – but with “we hacked your website and stole all your data” instead of “we hacked your webcam and made a video”.
🕴 Microsoft Releases Update for DoS Flaw in .NET Core 🕴
📖 Read
via "Dark Reading: ".
Customers are advised to install the latest version of PowerShell to fully address CVE-2020-1108.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
🔐 Top 5 things to know about security breaches 🔐
📖 Read
via "Security on TechRepublic".
Verizon's annual Data Breach Investigations Report confirmed 3,950 data breaches across 16 industries. Tom Merritt explains five things to know about these breaches.📖 Read
via "Security on TechRepublic".
TechRepublic
Top 5 things to know about security breaches
Verizon's annual Data Breach Investigations Report confirmed 3,950 data breaches across 16 industries. Tom Merritt explains five things to know about these breaches.
🔐 Top 5 things to know about security breaches 🔐
📖 Read
via "Security on TechRepublic".
Verizon's annual Data Breach Investigations Report confirmed 3,950 data breaches across 16 industries. Tom Merritt explains five things to know about these breaches.📖 Read
via "Security on TechRepublic".
TechRepublic
Top 5 things to know about security breaches
Verizon's annual Data Breach Investigations Report confirmed 3,950 data breaches across 16 industries. Tom Merritt explains five things to know about these breaches.
ATENTION‼ New - CVE-2019-20838
📖 Read
via "National Vulnerability Database".
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21246
📖 Read
via "National Vulnerability Database".
Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21245
📖 Read
via "National Vulnerability Database".
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.📖 Read
via "National Vulnerability Database".
❌ WFH Alert: Critical Bug Found in Old D-Link Router Models ❌
📖 Read
via "Threatpost".
Researchers find six bugs in consumer D-Link DIR-865L Wireless AC 1750 Dual Band Cloud Router.📖 Read
via "Threatpost".
Threat Post
WFH Alert: Critical Bug Found in Old D-Link Router Models
Researchers find six bugs in consumer D-Link DIR-865L Wireless AC 1750 Dual Band Cloud Router.
❌ Intel Adds Anti-Malware Protection in Tiger Lake CPUs ❌
📖 Read
via "Threatpost".
Intel's Tiger Lake CPUs will come with Control-flow Enforcement Technology (CET), aimed at battling common control-flow hijacking attacks.📖 Read
via "Threatpost".
Threat Post
Intel Adds Anti-Malware Protection in Tiger Lake CPUs
Intel's Tiger Lake CPUs will come with Control-flow Enforcement Technology (CET), aimed at battling common control-flow hijacking attacks.
🕴 Intel Tackles Malware Related to Memory Security at Hardware Level 🕴
📖 Read
via "Dark Reading: ".
New control-flow enforcement technology will become available with upcoming Tiger Lake mobile processor, chipmaker says.📖 Read
via "Dark Reading: ".
Dark Reading
Intel Tackles Malware Related to Memory Security at Hardware Level
New control-flow enforcement technology will become available with upcoming Tiger Lake mobile processor, chipmaker says.
🔏 Following Breach, Marketplace Minted Target of New CCPA Lawsuit 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
The online marketplace, which specializes in greeting cards and wedding invites, was hit with a class action lawsuit under the California Consumer Privacy Act last week, alleging it failed to protect its customers PII.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Following Breach, Marketplace Minted Target of New CCPA Lawsuit
The online marketplace, which specializes in greeting cards and wedding invites, was hit with a class action lawsuit under the California Consumer Privacy Act last week, alleging it failed to protect its customers PII.
❌ Twitter Disrupts Wide-Ranging Political Disinformation Campaigns ❌
📖 Read
via "Threatpost".
This removal, of 32K accounts, is not the first time Twitter has taken action to protect its users from influence operations. Researchers weighed in on the practice with Threatpost.📖 Read
via "Threatpost".
Threat Post
Twitter Disrupts Wide-Ranging Political Disinformation Campaigns
This removal, of 32K accounts, is not the first time Twitter has taken action to protect its users from influence operations. Researchers weighed in on the practice with Threatpost.
🕴 Now-Former eBay Security Team Members Charged in Bizarre Cyberstalking Campaign 🕴
📖 Read
via "Dark Reading: ".
A bloody pig mask, doxing threats, and a foiled surveillance attempt were among the actions six ex-eBay employees took against an editor and publisher of a newsletter.📖 Read
via "Dark Reading: ".
Dark Reading
Now-Former eBay Security Team Members Charged in Bizarre Cyberstalking Campaign
A bloody pig mask, doxing threats, and a foiled surveillance attempt were among the actions six ex-eBay employees took against an editor and publisher of a newsletter.
🕴 Ryuk Continues to Dominate Ransomware Response Cases 🕴
📖 Read
via "Dark Reading: ".
Analysis reveals how Ryuk's operators are changing their techniques and using new means to break in.📖 Read
via "Dark Reading: ".
Dark Reading
Ryuk Continues to Dominate Ransomware Response Cases
Analysis reveals how Ryuk's operators are changing their techniques and using new means to break in.