🕴 Microsoft Issues Out-of-Band Patches for RCE Flaws 🕴
📖 Read
via "Dark Reading: ".
Vulnerabilities had not been exploited or publicly disclosed before fixes were released, Microsoft reports.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
🕴 New MacOS Ransomware Hides in Pirated Program 🕴
📖 Read
via "Dark Reading: ".
A bogus installer for Little Snitch carries a ransomware hitchhiker.📖 Read
via "Dark Reading: ".
Dark Reading
New MacOS Ransomware Hides in Pirated Program
A bogus installer for Little Snitch carries a ransomware hitchhiker.
❌ Alina Point-of-Sale Malware Spotted in Ongoing Campaign ❌
📖 Read
via "Threatpost".
The malware is using DNS tunneling to exfiltrate payment-card data.📖 Read
via "Threatpost".
Threat Post
Alina Point-of-Sale Malware Spotted in Ongoing Campaign
The malware is using DNS tunneling to exfiltrate payment-card data.
❌ Cisco Warns of High-Severity Bug in Small Business Switch Lineup ❌
📖 Read
via "Threatpost".
A high-severity flaw allows remote, unauthenticated attackers to potentially gain administrative privileges for Cisco small business switches.📖 Read
via "Threatpost".
Threat Post
Cisco Warns of High-Severity Bug in Small Business Switch Lineup
A high-severity flaw allows remote, unauthenticated attackers to potentially gain administrative privileges for Cisco small business switches.
🕴 DHS Shares Data on Top Cyberthreats to Federal Agencies 🕴
📖 Read
via "Dark Reading: ".
Backdoors, cryptominers, and ransomware were the most widely detected threats by the DHS Cybersecurity and Infrastructure Security Agency (CISA)'s intrusion prevention system EINSTEIN.📖 Read
via "Dark Reading: ".
Dark Reading
DHS Shares Data on Top Cyberthreats to Federal Agencies
Backdoors, cryptominers, and ransomware were the most widely detected threats by the DHS Cybersecurity and Infrastructure Security Agency (CISA)'s intrusion prevention system EINSTEIN.
🕴 Businesses Invest in Cloud Security Tools Despite Concerns 🕴
📖 Read
via "Dark Reading: ".
A majority of organizations say the acceleration was driven by a need to support more remote employees.📖 Read
via "Dark Reading: ".
Dark Reading
Businesses Invest in Cloud Security Tools Despite Concerns
A majority of organizations say the acceleration was driven by a need to support more remote employees.
🕴 Chinese Software Company Aisino Uninstalls GoldenSpy Malware 🕴
📖 Read
via "Dark Reading: ".
Follow-up sandbox research confirms Aisino knew about the malware in its tax software, though it's still unclear whether it was culpable.📖 Read
via "Dark Reading: ".
Dark Reading
Chinese Software Company Aisino Uninstalls GoldenSpy Malware
Follow-up sandbox research confirms Aisino knew about the malware in its tax software, though it's still unclear whether it was culpable.
ATENTION‼ New - CVE-2019-15312
📖 Read
via "National Vulnerability Database".
An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is a Zolo Halo DNS rebinding attack. The device was found to be vulnerable to DNS rebinding. Combined with one of the many /httpapi.asp endpoint command-execution security issues, the DNS rebinding attack could allow an attacker to compromise the victim device from the Internet.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-15311
📖 Read
via "National Vulnerability Database".
An issue was discovered on Zolo Halo devices via the Linkplay firmware. There is Zolo Halo LAN remote code execution. The Zolo Halo Bluetooth speaker had a GoAhead web server listening on the port 80. The /httpapi.asp endpoint of the GoAhead web server was also vulnerable to multiple command execution vulnerabilities.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-15310
📖 Read
via "National Vulnerability Database".
An issue was discovered on various devices via the Linkplay firmware. There is WAN remote code execution without user interaction. An attacker could retrieve the AWS key from the firmware and obtain full control over Linkplay's AWS estate, including S3 buckets containing device firmware. When combined with an OS command injection vulnerability within the XML Parsing logic of the firmware update process, an attacker would be able to gain code execution on any device that attempted to update. Note that by default all devices tested had automatic updates enabled.📖 Read
via "National Vulnerability Database".
🕴 Attackers Compromised Dozens of News Websites as Part of Ransomware Campaign 🕴
📖 Read
via "Dark Reading: ".
Malware used to download WastedLocker on target networks was hosted on legit websites belonging to one parent company, Symantec says.📖 Read
via "Dark Reading: ".
Dark Reading
Attackers Compromised Dozens of News Websites as Part of Ransomware Campaign
Malware used to download WastedLocker on target networks was hosted on legit websites belonging to one parent company, Symantec says.
ATENTION‼ New - CVE-2019-20417
📖 Read
via "National Vulnerability Database".
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate internal services via an Information Disclosure vulnerability. The vulnerability is only exploitable if WebSudo is disabled in Jira. The affected versions are before version 8.4.2.📖 Read
via "National Vulnerability Database".
⚠ 133m records for sale as fruits of data breach spree keep raining down ⚠
📖 Read
via "Naked Security".
Databases can be had for as little as $100, on up to $1,100. Most, if not all, are being sold by the hacking group Shiny Hunters.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 7 IoT Tips for Home Users 🕴
📖 Read
via "Dark Reading: ".
Whether for business or pleasure, you're on your own once you walk into the house with a new Internet of Things device. Here's how to keep every one secure.📖 Read
via "Dark Reading: ".
Dark Reading
7 IoT Tips for Home Users
Whether for business or pleasure, you're on your own once you walk into the house with a new Internet of Things device. Here's how to keep everyone secure.
🔐 Zoom: We've delivered on all of our security and privacy promises, apart from one 🔐
📖 Read
via "Security on TechRepublic".
CEO Eric Yuan said the company had been working to improve safety, privacy and security, but has pushed back the date for its transparency report.📖 Read
via "Security on TechRepublic".
TechRepublic
Zoom: We've delivered on all of our security and privacy promises, apart from one
CEO Eric Yuan said the company had been working to improve safety, privacy and security, but has pushed back the date for its transparency report.
🕴 DHS Shares Data on Top Cyber Threats to Federal Agencies 🕴
📖 Read
via "Dark Reading: ".
Backdoors, cryptominers, and ransomware were the most widely detected threats by the DHS Cybersecurity and Infrastructure Security Agency (CISA)'s intrusion prevention system EINSTEIN.📖 Read
via "Dark Reading: ".
Dark Reading
DHS Shares Data on Top Cyber Threats to Federal Agencies
Backdoors, cryptominers, and ransomware were the most widely detected threats by the DHS Cybersecurity and Infrastructure Security Agency (CISA)'s intrusion prevention system EINSTEIN.
❌ FakeSpy Android Malware Spread Via ‘Postal-Service’ Apps ❌
📖 Read
via "Threatpost".
New ‘smishing’ campaigns from the Roaming Mantis threat group infect Android users with the FakeSpy infostealer.📖 Read
via "Threatpost".
Threat Post
FakeSpy Android Malware Spread Via ‘Postal-Service’ Apps
New ‘smishing’ campaigns from the Roaming Mantis threat group infect Android users with the FakeSpy infostealer.
🕴 Lessons from COVID-19 Cyberattacks: Where Do We Go Next? 🕴
📖 Read
via "Dark Reading: ".
We need to learn from the attacks and attempts that have occurred in order to prepare for the future.📖 Read
via "Dark Reading: ".
Dark Reading
Lessons from COVID-19 Cyberattacks: Where Do We Go Next?
We need to learn from the attacks and attempts that have occurred in order to prepare for the future.
⚠ MongoDB ransom threats step up from blackmail to full-on wiping ⚠
📖 Read
via "Naked Security".
Still thinking "the crooks probably won't find me if I make a security blunder"?📖 Read
via "Naked Security".
Naked Security
MongoDB ransom threats step up from blackmail to full-on wiping
Still thinking “the crooks probably won’t find me if I make a security blunder”?
🔏 EU Data Protection Authority Wants to Promote Digital Justice 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
The European Data Protection Supervisor (EDPS) announced its plans for 2020-2024 this week and stressed that the EU needs digital solidarity and to make data work for all people across Europe’s borders.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
EU Data Protection Authority Wants to Promote Digital Justice
The European Data Protection Supervisor (EDPS) announced its plans for 2020-2024 this week and stressed that the EU needs digital solidarity and to make data work for all people across Europe’s borders.
🛠 AIEngine 2.0.0 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
AIEngine is a packet inspection engine with capabilities of learning without any human intervention. It helps network/security professionals to identify traffic and develop signatures for use them on NIDS, Firewalls, Traffic classifiers and so on.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
AIEngine 2.0.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers