🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕴 Better Collaboration Between Security & Development 🕴

Security and development teams must make it clear why their segment of the development life cycle is relevant to the other teams in the pipeline.

📖 Read

via "Dark Reading: ".
Nvidia Warns Windows Gamers of Serious Graphics Driver Bugs

Several high-severity flaws in Nvidia's GPU display drivers for Windows users could lead to code-execution, DoS and more.

📖 Read

via "Threatpost".
🕴 Another Record-Breaking DDoS Attack Signals Shift in Criminal Methods 🕴

Malicious botnet sources explode in new attacks that push boundaries in terms of volume and duration.

📖 Read

via "Dark Reading: ".
🔐 FBI: Online crimes increasing in Florida, California, Texas, Ohio, and New York 🔐

Analysis of FBI data found that nearly $2 billion was stolen from US victims in 2019 just from business email compromise.

📖 Read

via "Security on TechRepublic".
🔐 What your personal identity and data are worth on the Dark Web 🔐

Your credit card is worth around $33, your driver's license around $27, and your PayPal account around $42, according to Reviews.org.

📖 Read

via "Security on TechRepublic".
🔐 Phishing attacks target workers returning to the office 🔐

Emails with fake COVID-19 training materials are trying to trick employees into sharing their Microsoft credentials, says Check Point Research.

📖 Read

via "Security on TechRepublic".
🕴 Vulnerabilities Declining in Open Source, But Slow Patching Still a Problem 🕴

Even as more code is produced, indirect dependencies continue to undermine security.

📖 Read

via "Dark Reading: ".
🕴 Contact Tracing & Threat Intel: Broken Tools & Processes 🕴

How epidemiology can solve the people problem in security.

📖 Read

via "Dark Reading: ".
ATENTION New - CVE-2018-21268

The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.

📖 Read

via "National Vulnerability Database".
Golang Worm Widens Scope to Windows, Adds Payload Capacity

A first-stage malware loader spotted in active campaigns has added additional exploits and a new backdoor capability.

📖 Read

via "Threatpost".
🔏 Senate's New Anti-Encryption Bill Rankles Privacy Advocates 🔏

Privacy advocates are up in arms about a sweeping new bill introduced this week that would allow "lawful access" of encrypted devices and services with a warrant.

📖 Read

via "Subscriber Blog RSS Feed ".
🔐 Expiring security certificates may start shutting down IoT devices 🔐

Updating CA root SSL certificates requires updating the firmware on streaming devices, smart devices, routers, cameras, and more.

📖 Read

via "Security on TechRepublic".
Nationwide Facial Recognition Ban Proposed By Lawmakers

Lawmakers proposed a new bill that would ban the use of facial recognition by law enforcement nationwide.

📖 Read

via "Threatpost".
🕴 7 Tips for Effective Deception 🕴

The right decoys can frustrate attackers and help detect threats more quickly.

📖 Read

via "Dark Reading: ".
🕴 Criminals Turn to IM Platforms to Avoid Law Enforcement Scrutiny 🕴

Researchers from IntSights observed a sharp increase in the use of popular instant messaging apps over the past year among threat groups.

📖 Read

via "Dark Reading: ".
ATENTION New - CVE-2020-10379

In Pillow before 6.2.3 and 7.x before 7.0.1, there are two Buffer Overflows in libImaging/TiffDecode.c.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2020-10378

In libImaging/PcxDecode.c in Pillow before 6.2.3 and 7.x before 7.0.1, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2020-10177

Pillow before 6.2.3 and 7.x before 7.0.1 has multiple out-of-bounds reads in libImaging/FliDecode.c.

📖 Read

via "National Vulnerability Database".
🔐 How to use NGINX as a reverse proxy 🔐

A reverse proxy can do wonders for your network and its security. Learn how to configure NGINX to serve this very purpose.

📖 Read

via "Security on TechRepublic".
ATENTION New - CVE-2019-19506

Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service, caused by an error in the "homeplugd" process. By sending a specially crafted UDP packet, an attacker could exploit this vulnerability to cause the device to reboot.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2019-19505

Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the "Wireless" section in the web-UI. By sending a specially crafted hostname, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.

📖 Read

via "National Vulnerability Database".