πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
❌ IcedID Banker is Back, Adding Steganography, COVID-19 Theme ❌

The malware has boosted its anti-detection capabilities in a new email campaign.

πŸ“– Read

via "Threatpost".
πŸ” Cybersecurity risks in a possible US manufacturing resurgence πŸ”

When factories, notably in China, shuttered during the COVID-19 pandemic, products the US relied on were impacted. Here's how experts see a return to "Made in America" and the incumbent risks.

πŸ“– Read

via "Security on TechRepublic".
πŸ” Microsoft 365 phishing campaign exploits Samsung, Adobe, and Oxford University πŸ”

The attack redirects users through legitimate websites in an attempt to capture their Microsoft credentials, says Check Point Research.

πŸ“– Read

via "Security on TechRepublic".
πŸ” Popular mobile banking apps are riddled with security flaws, and Android users are more at risk πŸ”

A study of banking apps for iOS and Android found poor source code protection, cleartext storage of sensitive data, and other serious flaws that make it easy for attackers to break into accounts.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Adobe Releases PDF Protected Mode for Acrobat DC πŸ•΄

The preview, open to Windows users, opens PDF files in a sandbox to protect users who open malicious Acrobat documents.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Have Your Say: Dark Reading Video News Desk Seeks Reader Contributions πŸ•΄

We've got questions for you on black infosec, burnout, vulnerabilities, COVID-19, and much more. Send us your video responses and we'll play them in our News Desk broadcast during Black Hat Virtual.

πŸ“– Read

via "Dark Reading: ".
πŸ” PCI SSC Releases New Standard to Secure Devices πŸ”

A new update to PCI requirements is designed to keep pace with the evolving financial threat environment.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
ATENTIONβ€Ό New - CVE-2019-13033

In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it may be possible to upload the data of additional scans.

πŸ“– Read

via "National Vulnerability Database".
❌ Facebook’s FTC-Mandated Privacy Committee Now in Effect ❌

Facebook will report its privacy practices to both the committee, the FTC, and to a third-party assessor.

πŸ“– Read

via "Threatpost".
❌ Google Yanks 106 β€˜Malicious’ Chrome Extensions ❌

Trojan Chrome browser extensions spied on users and maintained a foothold on the networks of financial services, oil and gas, media and entertainment, healthcare and pharmaceuticals and government organizations.

πŸ“– Read

via "Threatpost".
πŸ•΄ Cisco Patches Flaw in Webex Videoconferencing App πŸ•΄

Vulnerability would have allowed an attacker to gain access to sensitive information on a system, Trustwave's SpiderLab says.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Healthcare CISOs Share COVID-19 Response Stories πŸ•΄

Cybersecurity leaders discussed the threats and challenges that arose during the pandemic, and how they responded, during a virtual roundtable.

πŸ“– Read

via "Dark Reading: ".
⚠ Ripple20 bugs set off wave of security problems in millions of devices ⚠

Security researchers have discovered a handful of game-changing vulnerabilities that spell trouble for dozens of connected device vendors and their customers.

πŸ“– Read

via "Naked Security".
πŸ” Friday Five: 6/19 Edition πŸ”

Possible beer shortage caused by ransomware, dating apps expose 845 GB of sensitive data, and Zoom reverses controversial security decision - catch up on the week's news with the Friday Five.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
⚠ FBI uses T-shirt, tattoo and Vimeo clips to track down alleged arsonist ⚠

Amazing what online search, social media profiles, a DMV database and cameras everywhere can turn up about us.

πŸ“– Read

via "Naked Security".
❌ Netgear Zero-Day Allows Full Takeover of Dozens of Router Models ❌

An unpatched vulnerability in the web server of device firmware gives attackers root privileges, researchers said.

πŸ“– Read

via "Threatpost".
⚠ IBM Maximo Asset Management servers patched against attacks ⚠

As the name suggests, IBM Maximo is typically used by really big companies to track really huge numbers of assets...

πŸ“– Read

via "Naked Security".
πŸ•΄ 'New Normal' Caption Contest Winners πŸ•΄

Competitors submitted lots of clever virus puns, and the prizes go to ...

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ How to Secure Machine Learning πŸ•΄

Part two of a series on avoiding potential security risks with ML.

πŸ“– Read

via "Dark Reading: ".
πŸ” How to use the Whonix advanced security and privacy distribution πŸ”

Whonix is a Linux desktop dedicated to absolute security and privacy. Find out how to use this unique take on the desktop operating system.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ What Will Cybersecurity's 'New Normal' Look Like? πŸ•΄

The coronavirus pandemic has forced changes for much of the business world, cybersecurity included. What can we expect going forward?

πŸ“– Read

via "Dark Reading: ".