ATENTION‼ New - CVE-2017-1659
📖 Read
via "National Vulnerability Database".
"HCL iNotes is susceptible to a Cross-Site Scripting (XSS) Vulnerability. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials."📖 Read
via "National Vulnerability Database".
🕴 4 Steps to a More Mature Identity Program 🕴
📖 Read
via "Dark Reading: ".
Security has evolved to evaluate an identity's attributes, access, and behavior to determine appropriate access.📖 Read
via "Dark Reading: ".
Dark Reading
4 Steps to a More Mature Identity Program
Security has evolved to evaluate an identity's attributes, access, and behavior to determine appropriate access.
🔐 Be prepared: Why you need an incident response policy 🔐
📖 Read
via "Security on TechRepublic".
Smart security teams have updated incident response plans in place before a security breach happens.📖 Read
via "Security on TechRepublic".
TechRepublic
Be prepared: Why you need an incident response policy
Smart security teams have updated incident response plans in place before a security breach happens.
🔐 Business climate may be stabilizing for tech companies 🔐
📖 Read
via "Security on TechRepublic".
New CompTIA poll finds members are receiving inquiries around cybersecurity, migrating to the cloud, and managed services.📖 Read
via "Security on TechRepublic".
TechRepublic
Business climate may be stabilizing for tech companies
New CompTIA poll finds members are receiving inquiries around cybersecurity, migrating to the cloud, and managed services.
❌ EvilQuest: Inside A ‘New Class’ of Mac Malware ❌
📖 Read
via "Threatpost".
Mac expert Thomas Reed discusses how EvilQuest is ushering in a new class of Mac malware.📖 Read
via "Threatpost".
Threat Post
EvilQuest: Inside A ‘New Class’ of Mac Malware
Mac expert Thomas Reed discusses how EvilQuest is ushering in a new class of Mac malware.
🕴 Microsoft Issues Out-of-Band Patches for RCE Flaws 🕴
📖 Read
via "Dark Reading: ".
Vulnerabilities had not been exploited or publicly disclosed before fixes were released, Microsoft reports.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
🕴 New MacOS Ransomware Hides in Pirated Program 🕴
📖 Read
via "Dark Reading: ".
A bogus installer for Little Snitch carries a ransomware hitchhiker.📖 Read
via "Dark Reading: ".
Dark Reading
New MacOS Ransomware Hides in Pirated Program
A bogus installer for Little Snitch carries a ransomware hitchhiker.
❌ Alina Point-of-Sale Malware Spotted in Ongoing Campaign ❌
📖 Read
via "Threatpost".
The malware is using DNS tunneling to exfiltrate payment-card data.📖 Read
via "Threatpost".
Threat Post
Alina Point-of-Sale Malware Spotted in Ongoing Campaign
The malware is using DNS tunneling to exfiltrate payment-card data.
❌ Cisco Warns of High-Severity Bug in Small Business Switch Lineup ❌
📖 Read
via "Threatpost".
A high-severity flaw allows remote, unauthenticated attackers to potentially gain administrative privileges for Cisco small business switches.📖 Read
via "Threatpost".
Threat Post
Cisco Warns of High-Severity Bug in Small Business Switch Lineup
A high-severity flaw allows remote, unauthenticated attackers to potentially gain administrative privileges for Cisco small business switches.
🕴 DHS Shares Data on Top Cyberthreats to Federal Agencies 🕴
📖 Read
via "Dark Reading: ".
Backdoors, cryptominers, and ransomware were the most widely detected threats by the DHS Cybersecurity and Infrastructure Security Agency (CISA)'s intrusion prevention system EINSTEIN.📖 Read
via "Dark Reading: ".
Dark Reading
DHS Shares Data on Top Cyberthreats to Federal Agencies
Backdoors, cryptominers, and ransomware were the most widely detected threats by the DHS Cybersecurity and Infrastructure Security Agency (CISA)'s intrusion prevention system EINSTEIN.
🕴 Businesses Invest in Cloud Security Tools Despite Concerns 🕴
📖 Read
via "Dark Reading: ".
A majority of organizations say the acceleration was driven by a need to support more remote employees.📖 Read
via "Dark Reading: ".
Dark Reading
Businesses Invest in Cloud Security Tools Despite Concerns
A majority of organizations say the acceleration was driven by a need to support more remote employees.
🕴 Chinese Software Company Aisino Uninstalls GoldenSpy Malware 🕴
📖 Read
via "Dark Reading: ".
Follow-up sandbox research confirms Aisino knew about the malware in its tax software, though it's still unclear whether it was culpable.📖 Read
via "Dark Reading: ".
Dark Reading
Chinese Software Company Aisino Uninstalls GoldenSpy Malware
Follow-up sandbox research confirms Aisino knew about the malware in its tax software, though it's still unclear whether it was culpable.
ATENTION‼ New - CVE-2019-15312
📖 Read
via "National Vulnerability Database".
An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to be vulnerable to DNS rebinding. Combined with one of the many /httpapi.asp endpoint command-execution security issues, the DNS rebinding attack could allow an attacker to compromise the victim device from the Internet.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-15311
📖 Read
via "National Vulnerability Database".
An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN remote code execution. The Zolo Halo Bluetooth speaker had a GoAhead web server listening on the port 80. The /httpapi.asp endpoint of the GoAhead web server was also vulnerable to multiple command execution vulnerabilities.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-15310
📖 Read
via "National Vulnerability Database".
An issue was discovered on various devices via the Linkplay firmware. There is WAN remote code execution without user interaction. An attacker could retrieve the AWS key from the firmware and obtain full control over Linkplay's AWS estate, including S3 buckets containing device firmware. When combined with an OS command injection vulnerability within the XML Parsing logic of the firmware update process, an attacker would be able to gain code execution on any device that attempted to update. Note that by default all devices tested had automatic updates enabled.📖 Read
via "National Vulnerability Database".
🕴 Attackers Compromised Dozens of News Websites as Part of Ransomware Campaign 🕴
📖 Read
via "Dark Reading: ".
Malware used to download WastedLocker on target networks was hosted on legit websites belonging to one parent company, Symantec says.📖 Read
via "Dark Reading: ".
Dark Reading
Attackers Compromised Dozens of News Websites as Part of Ransomware Campaign
Malware used to download WastedLocker on target networks was hosted on legit websites belonging to one parent company, Symantec says.
ATENTION‼ New - CVE-2019-20417
📖 Read
via "National Vulnerability Database".
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate internal services via an Information Disclosure vulnerability. The vulnerability is only exploitable if WebSudo is disabled in Jira. The affected versions are before version 8.4.2.📖 Read
via "National Vulnerability Database".
⚠ 133m records for sale as fruits of data breach spree keep raining down ⚠
📖 Read
via "Naked Security".
Databases can be had for as little as $100, on up to $1,100. Most, if not all, are being sold by the hacking group Shiny Hunters.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 7 IoT Tips for Home Users 🕴
📖 Read
via "Dark Reading: ".
Whether for business or pleasure, you're on your own once you walk into the house with a new Internet of Things device. Here's how to keep every one secure.📖 Read
via "Dark Reading: ".
Dark Reading
7 IoT Tips for Home Users
Whether for business or pleasure, you're on your own once you walk into the house with a new Internet of Things device. Here's how to keep everyone secure.
🔐 Zoom: We've delivered on all of our security and privacy promises, apart from one 🔐
📖 Read
via "Security on TechRepublic".
CEO Eric Yuan said the company had been working to improve safety, privacy and security, but has pushed back the date for its transparency report.📖 Read
via "Security on TechRepublic".
TechRepublic
Zoom: We've delivered on all of our security and privacy promises, apart from one
CEO Eric Yuan said the company had been working to improve safety, privacy and security, but has pushed back the date for its transparency report.
🕴 DHS Shares Data on Top Cyber Threats to Federal Agencies 🕴
📖 Read
via "Dark Reading: ".
Backdoors, cryptominers, and ransomware were the most widely detected threats by the DHS Cybersecurity and Infrastructure Security Agency (CISA)'s intrusion prevention system EINSTEIN.📖 Read
via "Dark Reading: ".
Dark Reading
DHS Shares Data on Top Cyber Threats to Federal Agencies
Backdoors, cryptominers, and ransomware were the most widely detected threats by the DHS Cybersecurity and Infrastructure Security Agency (CISA)'s intrusion prevention system EINSTEIN.