❌ Popular TP-Link Family of Kasa Security Cams Vulnerable to Attack ❌
📖 Read
via "Threatpost".
Researcher warns the highly-rated Kasa family of security cameras have bugs that gives hackers access to private video feeds and settings.📖 Read
via "Threatpost".
Threat Post
Popular TP-Link Family of Kasa Security Cams Vulnerable to Attack
Researcher warns the highly-rated Kasa family of security cameras have bugs that gives hackers access to private video feeds and settings.
🛠 nfstream 5.1.6 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
nfstream is a Python package providing fast, flexible, and expressive data structures designed to make working with online or offline network data both easy and intuitive. It aims to be the fundamental high-level building block for doing practical, real world network data analysis in Python. Additionally, it has the broader goal of becoming a common network data processing framework for researchers providing data reproducibility across experiments.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
nfstream 5.1.6 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
ATENTION‼ New - CVE-2019-20898
📖 Read
via "National Vulnerability Database".
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the Global permissions screen. The affected versions are before version 8.8.0.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-20897
📖 Read
via "National Vulnerability Database".
The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG file. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2, and from version 8.7.0 before 8.7.1.📖 Read
via "National Vulnerability Database".
⚠ Monday review – the hot stories of the week ⚠
📖 Read
via "Naked Security".
Get yourself up to date with everything we've written in the last seven days - it's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot stories of the week
Get yourself up to date with everything we've written in the last seven days – it's weekly roundup time.
❌ How CARTA Strategies for Web Applications are Met with Indusface AppTrana Solution ❌
📖 Read
via "Threatpost".
From an operational standpoint, the foundation of CARTA starts with an assessment and then building the zero-trust principles on top of that with an adaptive security model.📖 Read
via "Threatpost".
Threat Post
How CARTA Strategies for Web Applications are Met with Indusface AppTrana Solution
From an operational standpoint, the foundation of CARTA starts with an assessment and then building the zero-trust principles on top of that.
❌ A ‘New Age’ of Sophisticated Business Email Compromise is Coming ❌
📖 Read
via "Threatpost".
A new BEC threat group is heralding more sophisticated email scams that target organizations without DMARC and squeeze as much money out of victims as possible.📖 Read
via "Threatpost".
Threat Post
A ‘New Age’ of Sophisticated Business Email Compromise is Coming
A new BEC threat group is heralding more sophisticated email scams that target organizations without DMARC and squeeze as much money out of victims as possible.
🕴 Learn About the Latest Election Security Threats and Defenses at Black Hat USA 🕴
📖 Read
via "Dark Reading: ".
Christopher Krebs, director of the CISA, will explain how the organization is leading the federal effort to support state and local officials in their mission to secure US elections this year.📖 Read
via "Dark Reading: ".
Dark Reading
Learn About the Latest Election Security Threats and Defenses at Black Hat USA
Christopher Krebs, director of the CISA, will explain how the organization is leading the federal effort to support state and local officials in their mission to secure US elections this year.
❌ The Enemy Within: How Insider Threats Are Changing ❌
📖 Read
via "Threatpost".
Insider-threat security experts unravel the new normal during this time of remote working, and explain how to protect sensitive data from this escalating risk.📖 Read
via "Threatpost".
Threat Post
The Enemy Within: How Insider Threats Are Changing
Insider-threat security experts unravel the new normal during this time of remote working, and explain how to protect sensitive data from this escalating risk.
🕴 Decoding the Verizon DBIR Report: An Insider's Look Beyond the Headlines 🕴
📖 Read
via "Dark Reading: ".
To truly understand cybersecurity trends, we must look beyond the headlines and ask more of the data. What you learn might surprise you.📖 Read
via "Dark Reading: ".
Dark Reading
Decoding the Verizon DBIR Report: An Insider's Look Beyond the Headlines
To truly understand cybersecurity trends, we must look beyond the headlines and ask more of the data. What you learn might surprise you.
⚠ Digicert revokes a raft of web security certificates ⚠
📖 Read
via "Naked Security".
The good news is that this was a bureaucratic necessity rather than an actual cybersecurity attack.📖 Read
via "Naked Security".
Naked Security
Digicert revokes a raft of web security certificates
The good news is that this was a bureaucratic necessity rather than an actual cybersecurity attack.
❌ Secret Service Creates Cyber Fraud Task Forces ❌
📖 Read
via "Threatpost".
Traditional financial crime and cyberattacks are converging, requiring new skills and approaches to the problem, officials said.📖 Read
via "Threatpost".
Threat Post
Secret Service Creates Cyber Fraud Task Forces
Traditional financial crime and cyberattacks are converging, requiring new skills and approaches to the problem, officials said.
🕴 Experts Predict Rise of Data Theft in Ransomware Attacks 🕴
📖 Read
via "Dark Reading: ".
The most attractive targets for data theft are businesses perceived as most likely to pay to prevent exposure of their information.📖 Read
via "Dark Reading: ".
Dark Reading
Experts Predict Rise of Data Theft in Ransomware Attacks
The most attractive targets for data theft are businesses perceived as most likely to pay to prevent exposure of their information.
ATENTION‼ New - CVE-2019-19338
📖 Read
via "National Vulnerability Database".
A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs. When a guest is running on a host CPU affected by the TAA flaw (TAA_NO=0), but is not affected by the MDS issue (MDS_NO=1), the guest was to clear the affected buffers by using a VERW instruction mechanism. But when the MDS_NO=1 bit was exported to the guests, the guests did not use the VERW mechanism to clear the affected buffers. This issue affects guests running on Cascade Lake CPUs and requires that host has 'TSX' enabled. Confidentiality of data is the highest threat associated with this vulnerability.📖 Read
via "National Vulnerability Database".
🛠 Sifter 8.2 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Sifter is a osint, recon, and vulnerability scanner. It combines a plethora of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the blue vulnerabilities within Microsoft systems and if unpatched, exploits them.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Sifter 8.2 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ TrickBot Sample Accidentally Warns Victims They’re Infected ❌
📖 Read
via "Threatpost".
A data-stealing module in a recent sandboxed sample triggers browser-based fraud alerts for Trickbot victims -- and shows something of the inner working of the malware's operators.📖 Read
via "Threatpost".
Threat Post
TrickBot Sample Accidentally Warns Victims They’re Infected
A data-stealing module in a recent sandboxed sample triggers browser-based fraud alerts for Trickbot victims — and shows something of the inner working of the malware's operators.
🕴 Russian Hacker Convicted for Social Network Hacks 🕴
📖 Read
via "Dark Reading: ".
The Russian national was convicted of hacking into accounts at LinkedIn, Dropbox, and Formspring.📖 Read
via "Dark Reading: ".
Dark Reading
Russian Hacker Convicted for Social Network Hacks
The Russian national was convicted of hacking into accounts at LinkedIn, Dropbox, and Formspring.
🕴 Zero-Trust Efforts Rise with the Tide of Remote Working 🕴
📖 Read
via "Dark Reading: ".
With employees likely to continue to spend much, if not all, of their time working from home, companies are focusing more on technologies to boost the security of their now-distributed workplace.📖 Read
via "Dark Reading: ".
Dark Reading
Zero-Trust Efforts Rise with the Tide of Remote Working
With employees likely to continue to spend much, if not all, of their time working from home, companies are focusing more on technologies to boost the security of their now-distributed workplace.
❌ Critical SAP Bug Allows Full Enterprise System Takeover ❌
📖 Read
via "Threatpost".
Exploitation of the bug can allow an attacker to lift sensitive information, delete files, execute code, carry out sabotage and more.📖 Read
via "Threatpost".
Threat Post
Critical SAP Bug Allows Full Enterprise System Takeover
Exploitation of the bug can allow an attacker to lift sensitive information, delete files, execute code, carry out sabotage and more.