ATENTION‼ New - CVE-2018-16848
📖 Read
via "National Vulnerability Database".
A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can lead to resource exhaustion culminating in a denial of service.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18869
📖 Read
via "National Vulnerability Database".
A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks.📖 Read
via "National Vulnerability Database".
⚠ You’ve heard of sextortion – now there’s “breachstortion”, too.. ⚠
📖 Read
via "Naked Security".
Sextortion again - but with "we hacked your website and stole all your data" instead of "we hacked your webcam and made a video".📖 Read
via "Naked Security".
Naked Security
You’ve heard of sextortion – now there’s “breachstortion”, too
Sextortion again – but with “we hacked your website and stole all your data” instead of “we hacked your webcam and made a video”.
🕴 Microsoft Releases Update for DoS Flaw in .NET Core 🕴
📖 Read
via "Dark Reading: ".
Customers are advised to install the latest version of PowerShell to fully address CVE-2020-1108.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
🔐 Top 5 things to know about security breaches 🔐
📖 Read
via "Security on TechRepublic".
Verizon's annual Data Breach Investigations Report confirmed 3,950 data breaches across 16 industries. Tom Merritt explains five things to know about these breaches.📖 Read
via "Security on TechRepublic".
TechRepublic
Top 5 things to know about security breaches
Verizon's annual Data Breach Investigations Report confirmed 3,950 data breaches across 16 industries. Tom Merritt explains five things to know about these breaches.
🔐 Top 5 things to know about security breaches 🔐
📖 Read
via "Security on TechRepublic".
Verizon's annual Data Breach Investigations Report confirmed 3,950 data breaches across 16 industries. Tom Merritt explains five things to know about these breaches.📖 Read
via "Security on TechRepublic".
TechRepublic
Top 5 things to know about security breaches
Verizon's annual Data Breach Investigations Report confirmed 3,950 data breaches across 16 industries. Tom Merritt explains five things to know about these breaches.
ATENTION‼ New - CVE-2019-20838
📖 Read
via "National Vulnerability Database".
libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21246
📖 Read
via "National Vulnerability Database".
Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21245
📖 Read
via "National Vulnerability Database".
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.📖 Read
via "National Vulnerability Database".
❌ WFH Alert: Critical Bug Found in Old D-Link Router Models ❌
📖 Read
via "Threatpost".
Researchers find six bugs in consumer D-Link DIR-865L Wireless AC 1750 Dual Band Cloud Router.📖 Read
via "Threatpost".
Threat Post
WFH Alert: Critical Bug Found in Old D-Link Router Models
Researchers find six bugs in consumer D-Link DIR-865L Wireless AC 1750 Dual Band Cloud Router.
❌ Intel Adds Anti-Malware Protection in Tiger Lake CPUs ❌
📖 Read
via "Threatpost".
Intel's Tiger Lake CPUs will come with Control-flow Enforcement Technology (CET), aimed at battling common control-flow hijacking attacks.📖 Read
via "Threatpost".
Threat Post
Intel Adds Anti-Malware Protection in Tiger Lake CPUs
Intel's Tiger Lake CPUs will come with Control-flow Enforcement Technology (CET), aimed at battling common control-flow hijacking attacks.
🕴 Intel Tackles Malware Related to Memory Security at Hardware Level 🕴
📖 Read
via "Dark Reading: ".
New control-flow enforcement technology will become available with upcoming Tiger Lake mobile processor, chipmaker says.📖 Read
via "Dark Reading: ".
Dark Reading
Intel Tackles Malware Related to Memory Security at Hardware Level
New control-flow enforcement technology will become available with upcoming Tiger Lake mobile processor, chipmaker says.
🔏 Following Breach, Marketplace Minted Target of New CCPA Lawsuit 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
The online marketplace, which specializes in greeting cards and wedding invites, was hit with a class action lawsuit under the California Consumer Privacy Act last week, alleging it failed to protect its customers PII.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Following Breach, Marketplace Minted Target of New CCPA Lawsuit
The online marketplace, which specializes in greeting cards and wedding invites, was hit with a class action lawsuit under the California Consumer Privacy Act last week, alleging it failed to protect its customers PII.
❌ Twitter Disrupts Wide-Ranging Political Disinformation Campaigns ❌
📖 Read
via "Threatpost".
This removal, of 32K accounts, is not the first time Twitter has taken action to protect its users from influence operations. Researchers weighed in on the practice with Threatpost.📖 Read
via "Threatpost".
Threat Post
Twitter Disrupts Wide-Ranging Political Disinformation Campaigns
This removal, of 32K accounts, is not the first time Twitter has taken action to protect its users from influence operations. Researchers weighed in on the practice with Threatpost.
🕴 Now-Former eBay Security Team Members Charged in Bizarre Cyberstalking Campaign 🕴
📖 Read
via "Dark Reading: ".
A bloody pig mask, doxing threats, and a foiled surveillance attempt were among the actions six ex-eBay employees took against an editor and publisher of a newsletter.📖 Read
via "Dark Reading: ".
Dark Reading
Now-Former eBay Security Team Members Charged in Bizarre Cyberstalking Campaign
A bloody pig mask, doxing threats, and a foiled surveillance attempt were among the actions six ex-eBay employees took against an editor and publisher of a newsletter.
🕴 Ryuk Continues to Dominate Ransomware Response Cases 🕴
📖 Read
via "Dark Reading: ".
Analysis reveals how Ryuk's operators are changing their techniques and using new means to break in.📖 Read
via "Dark Reading: ".
Dark Reading
Ryuk Continues to Dominate Ransomware Response Cases
Analysis reveals how Ryuk's operators are changing their techniques and using new means to break in.
❌ Shadow IT: Why It’s Still a Major Risk in Today’s Environments ❌
📖 Read
via "Threatpost".
According to industry analyst firm Gartner, as many as one-third of successful attacks on enterprises target data that are housed in unsanctioned IT resources.📖 Read
via "Threatpost".
Threat Post
Shadow IT: Why It’s Still a Major Risk in Today’s Environments
As employees grow accustomed to cloud-based consumer applications, it's become challenging for IT and security teams to maintain visibility and control.
⚠ Eavesdroppers can use light bulbs to listen in from afar ⚠
📖 Read
via "Naked Security".
Researchers have developed an ingenious way to eavesdrop from a distance without relying on planted bugs: they just stare at a light bulb.📖 Read
via "Naked Security".
Naked Security
Eavesdroppers can use light bulbs to listen in from afar
Researchers have developed an ingenious way to eavesdrop from a distance without relying on planted bugs: they just stare at a light bulb.
⚠ ‘Anonymous’ takes down Atlanta Police Dept. site after police shooting ⚠
📖 Read
via "Naked Security".
Hackers affiliating themselves with the hacktivist label have joined the Black Lives Matter backlash after a fatal police shooting on Friday.📖 Read
via "Naked Security".
Naked Security
‘Anonymous’ takes down Atlanta Police Dept. site after police shooting
Hackers affiliating themselves with the hacktivist label have joined the Black Lives Matter backlash after a fatal police shooting on Friday.
🕴 IoT Security Trends & Challenges in the Wake of COVID-19 🕴
📖 Read
via "Dark Reading: ".
The demand for Internet of Things security practices that protect sensitive medical equipment and data will double within the next five years. Here's why.📖 Read
via "Dark Reading: ".
Dark Reading
IoT Security Trends & Challenges in the Wake of COVID-19
The demand for Internet of Things security practices that protect sensitive medical equipment and data will double within the next five years. Here's why.
🔐 How to protect your organization's domain from security threats 🔐
📖 Read
via "Security on TechRepublic".
Unlocked domains are susceptible to malicious tactics that can lead to unauthorized DNS changes and domain name hijacking, says CSC.📖 Read
via "Security on TechRepublic".
TechRepublic
How to protect your organization's domain from security threats
Unlocked domains are susceptible to malicious tactics that can lead to unauthorized DNS changes and domain name hijacking, says CSC.