🕴 Good Cyber Hygiene in a Pandemic-Driven World Starts with Us 🕴
📖 Read
via "Dark Reading: ".
Three ways that security teams can improve processes and collaboration, all while creating the common ground needed to sustain them.📖 Read
via "Dark Reading: ".
Dark Reading
Good Cyber Hygiene in a Pandemic-Driven World Starts with Us
Three ways that security teams can improve processes and collaboration, all while creating the common ground needed to sustain them.
🛠 Sifter 7.5 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Sifter is a osint, recon, and vulnerability scanner. It combines a plethora of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the blue vulnerabilities within Microsoft systems and if unpatched, exploits them.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Sifter 7.5 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Haveged 1.9.13 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
haveged is a daemon that feeds the /dev/random pool on Linux using an adaptation of the HArdware Volatile Entropy Gathering and Expansion algorithm invented at IRISA. The algorithm is self-tuning on machines with cpuid support, and has been tested in both 32-bit and 64-bit environments. The tarball uses the GNU build mechanism, and includes self test targets and a spec file for those who want to build an RPM.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Haveged 1.9.13 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
ATENTION‼ New - CVE-2019-19160
📖 Read
via "National Vulnerability Database".
Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into the configure file(rxp).📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-18256
📖 Read
via "National Vulnerability Database".
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-18254
📖 Read
via "National Vulnerability Database".
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-18252
📖 Read
via "National Vulnerability Database".
BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-18248
📖 Read
via "National Vulnerability Database".
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting to the BIOTRONIK Remote Communication infrastructure.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-18246
📖 Read
via "National Vulnerability Database".
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure.📖 Read
via "National Vulnerability Database".
❌ Unpatched Wi-Fi Extender Opens Home Networks to Remote Control ❌
📖 Read
via "Threatpost".
The Homeplug device, from Tenda, suffers from web server bugs as well as a DoS flaw.📖 Read
via "Threatpost".
Threat Post
Unpatched Wi-Fi Extender Opens Home Networks to Remote Control
The Homeplug device, from Tenda, suffers from web server bugs as well as a DoS flaw.
❌ AWS Facial Recognition Platform Misidentified Over 100 Politicians As Criminals ❌
📖 Read
via "Threatpost".
Comparitech’s Paul Bischoff found that Amazon’s facial recognition platform misidentified an alarming number of people, and was racially biased.📖 Read
via "Threatpost".
Threat Post
AWS Facial Recognition Platform Misidentified Over 100 Politicians As Criminals
Comparitech’s Paul Bischoff found that Amazon’s facial recognition platform misidentified an alarming number of people, and was racially biased.
🔐 ID theft: Fake Google alerts are now delivering malware 🔐
📖 Read
via "Security on TechRepublic".
E-mails telling you that your data has been compromised are now sometimes fake. Be careful what you click on.📖 Read
via "Security on TechRepublic".
TechRepublic
ID theft: Fake Google alerts are now delivering malware
E-mails telling you that your data has been compromised are now sometimes fake. Be careful what you click on.
🔐 ID theft: Fake Google alerts are now delivering malware 🔐
📖 Read
via "Security on TechRepublic".
E-mails telling you that your data has been compromised are now sometimes fake. Be careful what you click on.📖 Read
via "Security on TechRepublic".
TechRepublic
ID theft: Fake Google alerts are now delivering malware
E-mails telling you that your data has been compromised are now sometimes fake. Be careful what you click on.
❌ Tuesday’s Magento 1 EOL Leaves Clock Ticking on 100K Online Stores ❌
📖 Read
via "Threatpost".
Adobe and payment-card companies are making last-minute pleas for e-commerce sites to update to Magento 2, to avoid Magecart attacks and more.📖 Read
via "Threatpost".
Threat Post
Tuesday’s Magento 1 EOL Leaves Clock Ticking on 100K Online Stores
Adobe and payment-card companies are making last-minute pleas for e-commerce sites to update to Magento 2, to avoid Magecart attacks and more.
🕴 Files Stolen from 945 Websites Discovered on Dark Web 🕴
📖 Read
via "Dark Reading: ".
Researchers who found the archived SQL files estimate up to 14 million people could be affected.📖 Read
via "Dark Reading: ".
Dark Reading
Files Stolen from 945 Websites Discovered on Dark Web
Researchers who found the archived SQL files estimate up to 14 million people could be affected.
🔐 2020 sees rise in invoice and payment fraud BEC attacks 🔐
📖 Read
via "Security on TechRepublic".
Abnormal Security found a 75% increase in this type of campaign in the first three months of the year and a spike of 200% from April to May.📖 Read
via "Security on TechRepublic".
TechRepublic
2020 sees rise in invoice and payment fraud BEC attacks
Abnormal Security found a 75% increase in this type of campaign in the first three months of the year and a spike of 200% from April to May.
🔏 Email Error Leads to Exposed PHI of 11,500 Patients 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
A health plan recently disclosed a data breach of 11,500 patients that was triggered by an email mistake.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Email Error Leads to Exposed PHI of 11,500 Patients
A health plan recently disclosed a data breach of 11,500 patients that was triggered by an email mistake.
🔐 Why everyone should care about disinformation campaigns 🔐
📖 Read
via "Security on TechRepublic".
Fortalice CEO and former White House CIO Theresa Payton explains why disinformation is such a potent threat.📖 Read
via "Security on TechRepublic".
TechRepublic
Why everyone should care about disinformation campaigns
Fortalice CEO and former White House CIO Theresa Payton explains why disinformation is such a potent threat.
🔐 Why everyone should care about disinformation campaigns 🔐
📖 Read
via "Security on TechRepublic".
Fortalice CEO and former White House CIO Theresa Payton explains why disinformation is such a potent threat.📖 Read
via "Security on TechRepublic".
TechRepublic
Why everyone should care about disinformation campaigns
Fortalice CEO and former White House CIO Theresa Payton explains why disinformation is such a potent threat.
ATENTION‼ New - CVE-2018-6446
📖 Read
via "National Vulnerability Database".
A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications.📖 Read
via "National Vulnerability Database".
❌ REvil Ransomware Gang Adds Auction Feature for Stolen Data ❌
📖 Read
via "Threatpost".
An anonymous bidding mechanism enhances the REvil group's double-extortion game.📖 Read
via "Threatpost".
Threat Post
REvil Ransomware Gang Adds Auction Feature for Stolen Data
An anonymous bidding mechanism enhances the REvil group's double-extortion game.