ATENTION‼ New - CVE-2019-18248
📖 Read
via "National Vulnerability Database".
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting to the BIOTRONIK Remote Communication infrastructure.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-18246
📖 Read
via "National Vulnerability Database".
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure.📖 Read
via "National Vulnerability Database".
❌ Unpatched Wi-Fi Extender Opens Home Networks to Remote Control ❌
📖 Read
via "Threatpost".
The Homeplug device, from Tenda, suffers from web server bugs as well as a DoS flaw.📖 Read
via "Threatpost".
Threat Post
Unpatched Wi-Fi Extender Opens Home Networks to Remote Control
The Homeplug device, from Tenda, suffers from web server bugs as well as a DoS flaw.
❌ AWS Facial Recognition Platform Misidentified Over 100 Politicians As Criminals ❌
📖 Read
via "Threatpost".
Comparitech’s Paul Bischoff found that Amazon’s facial recognition platform misidentified an alarming number of people, and was racially biased.📖 Read
via "Threatpost".
Threat Post
AWS Facial Recognition Platform Misidentified Over 100 Politicians As Criminals
Comparitech’s Paul Bischoff found that Amazon’s facial recognition platform misidentified an alarming number of people, and was racially biased.
🔐 ID theft: Fake Google alerts are now delivering malware 🔐
📖 Read
via "Security on TechRepublic".
E-mails telling you that your data has been compromised are now sometimes fake. Be careful what you click on.📖 Read
via "Security on TechRepublic".
TechRepublic
ID theft: Fake Google alerts are now delivering malware
E-mails telling you that your data has been compromised are now sometimes fake. Be careful what you click on.
🔐 ID theft: Fake Google alerts are now delivering malware 🔐
📖 Read
via "Security on TechRepublic".
E-mails telling you that your data has been compromised are now sometimes fake. Be careful what you click on.📖 Read
via "Security on TechRepublic".
TechRepublic
ID theft: Fake Google alerts are now delivering malware
E-mails telling you that your data has been compromised are now sometimes fake. Be careful what you click on.
❌ Tuesday’s Magento 1 EOL Leaves Clock Ticking on 100K Online Stores ❌
📖 Read
via "Threatpost".
Adobe and payment-card companies are making last-minute pleas for e-commerce sites to update to Magento 2, to avoid Magecart attacks and more.📖 Read
via "Threatpost".
Threat Post
Tuesday’s Magento 1 EOL Leaves Clock Ticking on 100K Online Stores
Adobe and payment-card companies are making last-minute pleas for e-commerce sites to update to Magento 2, to avoid Magecart attacks and more.
🕴 Files Stolen from 945 Websites Discovered on Dark Web 🕴
📖 Read
via "Dark Reading: ".
Researchers who found the archived SQL files estimate up to 14 million people could be affected.📖 Read
via "Dark Reading: ".
Dark Reading
Files Stolen from 945 Websites Discovered on Dark Web
Researchers who found the archived SQL files estimate up to 14 million people could be affected.
🔐 2020 sees rise in invoice and payment fraud BEC attacks 🔐
📖 Read
via "Security on TechRepublic".
Abnormal Security found a 75% increase in this type of campaign in the first three months of the year and a spike of 200% from April to May.📖 Read
via "Security on TechRepublic".
TechRepublic
2020 sees rise in invoice and payment fraud BEC attacks
Abnormal Security found a 75% increase in this type of campaign in the first three months of the year and a spike of 200% from April to May.
🔏 Email Error Leads to Exposed PHI of 11,500 Patients 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
A health plan recently disclosed a data breach of 11,500 patients that was triggered by an email mistake.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Email Error Leads to Exposed PHI of 11,500 Patients
A health plan recently disclosed a data breach of 11,500 patients that was triggered by an email mistake.
🔐 Why everyone should care about disinformation campaigns 🔐
📖 Read
via "Security on TechRepublic".
Fortalice CEO and former White House CIO Theresa Payton explains why disinformation is such a potent threat.📖 Read
via "Security on TechRepublic".
TechRepublic
Why everyone should care about disinformation campaigns
Fortalice CEO and former White House CIO Theresa Payton explains why disinformation is such a potent threat.
🔐 Why everyone should care about disinformation campaigns 🔐
📖 Read
via "Security on TechRepublic".
Fortalice CEO and former White House CIO Theresa Payton explains why disinformation is such a potent threat.📖 Read
via "Security on TechRepublic".
TechRepublic
Why everyone should care about disinformation campaigns
Fortalice CEO and former White House CIO Theresa Payton explains why disinformation is such a potent threat.
ATENTION‼ New - CVE-2018-6446
📖 Read
via "National Vulnerability Database".
A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications.📖 Read
via "National Vulnerability Database".
❌ REvil Ransomware Gang Adds Auction Feature for Stolen Data ❌
📖 Read
via "Threatpost".
An anonymous bidding mechanism enhances the REvil group's double-extortion game.📖 Read
via "Threatpost".
Threat Post
REvil Ransomware Gang Adds Auction Feature for Stolen Data
An anonymous bidding mechanism enhances the REvil group's double-extortion game.
🕴 HackerOne Reveals Top 10 Bug-Bounty Programs 🕴
📖 Read
via "Dark Reading: ".
Rankings based on total bounties paid, top single bounty paid, time to respond, and more.📖 Read
via "Dark Reading: ".
Dark Reading
HackerOne Reveals Top 10 Bug-Bounty Programs
Rankings based on total bounties paid, top single bounty paid, time to respond, and more.
🕴 Russian Cybercriminal Behind CardPlanet Sentenced to 9 Years 🕴
📖 Read
via "Dark Reading: ".
Aleksei Burkov will go to federal prison for operating two websites built to facilitate payment card fraud, hacking, and other crimes.📖 Read
via "Dark Reading: ".
Dark Reading
Russian Cybercriminal Behind CardPlanet Sentenced to 9 Years
Aleksei Burkov will go to federal prison for operating two websites built to facilitate payment card fraud, hacking, and other crimes.
🕴 University of California SF Pays Ransom After Medical Servers Hit 🕴
📖 Read
via "Dark Reading: ".
As one of at least three universities hit in June, the school paid $1.14 million to cybercriminals following an attack on "several IT systems" in the UCSF School of Medicine.📖 Read
via "Dark Reading: ".
Dark Reading
University of California SF Pays Ransom After Medical Servers Hit
As one of at least three universities hit in June, the school paid $1.14 million to cybercriminals following an attack on several IT systems in the UCSF School of Medicine.
ATENTION‼ New - CVE-2019-20416
📖 Read
via "National Vulnerability Database".
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the project configuration feature. The affected versions are before version 8.3.0.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-20415
📖 Read
via "National Vulnerability Database".
Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0.📖 Read
via "National Vulnerability Database".
⚠ iOS 14 flags TikTok, 53 other apps spying on iPhone clipboards ⚠
📖 Read
via "Naked Security".
TikTok, for one, promised to knock this off months ago but was caught red-handed, still at it, by the new clipboard notification in iOS 14.📖 Read
via "Naked Security".
Naked Security
iOS 14 flags TikTok, 53 other apps spying on iPhone clipboards
TikTok, for one, promised to knock this off months ago but was caught red-handed, still at it, by the new clipboard notification in iOS 14.
ATENTION‼ New - CVE-2017-18922
📖 Read
via "National Vulnerability Database".
It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.📖 Read
via "National Vulnerability Database".