ATENTION‼ New - CVE-2019-12000
📖 Read
via "National Vulnerability Database".
HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 when HTTPS is used between the USSD and an external USSD service logic application. Update to version 3.2 and update the HTTPS configuration as described in the HPE MSE Messaging Gateway Configuration and Operations Guide.📖 Read
via "National Vulnerability Database".
⚠ Monday review – the hot stories of the week ⚠
📖 Read
via "Naked Security".
Catch up on the past week's stories, and watch our latest Naked Security Live video.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot stories of the week
Catch up on the past week’s stories, and watch our latest Naked Security Live video.
🔐 Microsoft Defender ATP for Android: This security software can help protect your devices and data 🔐
📖 Read
via "Security on TechRepublic".
Microsoft recently announced its first Android security tooling. But what is it for, and should you deploy it to your users?📖 Read
via "Security on TechRepublic".
🕴 Keys for a Safe Return to the Post-Coronavirus Office 🕴
📖 Read
via "Dark Reading: ".
Security teams will need to keep these important considerations in mind as employees make their way back to the workplace.📖 Read
via "Dark Reading: ".
Dark Reading
Keys for a Safe Return to the Post-Coronavirus Office
Security teams will need to keep these important considerations in mind as employees make their way back to the workplace.
❌ Paving the Path to Passwordless ❌
📖 Read
via "Threatpost".
Password management tools and apps can help ease the pain of passwords, but even those don’t totally solve all of the password challenges all of the time. 📖 Read
via "Threatpost".
Threat Post
Paving the Path to Passwordless
Password management tools and apps can help ease the pain of passwords, but even those don’t totally solve all of the password challenges all of the time.
🕴 What Organizations Need to Know About IoT Supply Chain Risk 🕴
📖 Read
via "Dark Reading: ".
Here are some factors organizations should consider as they look to limit the risk posed by risks like Ripple20.📖 Read
via "Dark Reading: ".
Dark Reading
What Organizations Need to Know About IoT Supply Chain Risk
Here are some factors organizations should consider as they look to limit the risk posed by risks like Ripple20.
🔐 Cybersecurity spending to grow this year but may be hit by budget constraints 🔐
📖 Read
via "Security on TechRepublic".
Spending on security products and services for 2020 could increase as much as 5.6%, or as little as 2.5%, depending on the economic impact of the coronavirus on IT budgets, says Canalys.📖 Read
via "Security on TechRepublic".
TechRepublic
Cybersecurity spending to grow this year but may be hit by budget constraints
Spending on security products and services for 2020 could increase as much as 5.6%, or as little as 2.5%, depending on the economic impact of the coronavirus on IT budgets, says Canalys.
🕴 Keys for a Safe Return to the Post-Quarantine Office 🕴
📖 Read
via "Dark Reading: ".
Security teams will need to keep these important considerations in mind as employees make their way back to the workplace.📖 Read
via "Dark Reading: ".
Dark Reading
Keys for a Safe Return to the Post-Quarantine Office
Security teams will need to keep these important considerations in mind as employees make their way back to the workplace.
🔏 What is Cloud Security? 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
With more businesses running vital business computing functions in the cloud today, cloud security is a must as attackers seek to exploit vulnerabilities and gain unauthorized access to sensitive data. In this post, we’ll talk about the benefits of cloud security as well as some best practices to follow.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
What is Cloud Security?
With more businesses running vital business computing functions in the cloud today, cloud security is a must as attackers seek to exploit vulnerabilities and gain unauthorized access to sensitive data. In this post, we’ll talk about the benefits of cloud…
❌ Mac Cryptocurrency Traders Targeted by Trojanized Apps ❌
📖 Read
via "Threatpost".
Four trojanized cryptocurrency trading apps have been found spreading malware that drains cryptocurrency wallets and collects Mac users' browsing data.📖 Read
via "Threatpost".
Threat Post
Mac Cryptocurrency Traders Targeted by Trojanized Apps
Four trojanized cryptocurrency trading apps have been found spreading malware that drains cryptocurrency wallets and collects Mac users' browsing data.
⚠ 7 VPNs that leaked their logs – the logs that “didn’t exist” ⚠
📖 Read
via "Naked Security".
Just how private is your Virtual Private Network?📖 Read
via "Naked Security".
Naked Security
7 VPNs that leaked their logs – logs that weren’t even supposed to exist
Just how private is your Virtual Private Network?
🔐 Phishing attacks aim to steal sensitive data by prompting people to renew Microsoft subscription 🔐
📖 Read
via "Security on TechRepublic".
The initial scam emails claim that the recipient must renew their Microsoft Office 365 subscription, says Abnormal Security.📖 Read
via "Security on TechRepublic".
❌ Facebook’s NSO Group Lawsuit Over WhatsApp Spying Set to Proceed ❌
📖 Read
via "Threatpost".
A federal judge in California ruled that the spyware vendor does not have sovereign immunity.📖 Read
via "Threatpost".
Threat Post
Facebook’s NSO Group Lawsuit Over WhatsApp Spying Set to Proceed
A federal judge in California ruled that the spyware vendor does not have sovereign immunity.
🕴 UK Data Privacy Legislation Cannot Be Bypassed to Limit Spread of COVID-19 🕴
📖 Read
via "Dark Reading: ".
The UK faces GDPR data privacy challenges regarding its COVID-19 "Test and Trace" program. Despite the importance of contact tracing, its intent to ignore privacy legislation is extremely worrying.📖 Read
via "Dark Reading: ".
Dark Reading
UK Data Privacy Legislation Cannot Be Bypassed to Limit Spread of COVID-19
The UK faces GDPR data privacy challenges regarding its COVID-19 Test and Trace program. Despite the importance of contact tracing, its intent to ignore privacy legislation is extremely worrying.
🛠 nfstream 5.2.0 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
nfstream is a Python package providing fast, flexible, and expressive data structures designed to make working with online or offline network data both easy and intuitive. It aims to be the fundamental high-level building block for doing practical, real world network data analysis in Python. Additionally, it has the broader goal of becoming a common network data processing framework for researchers providing data reproducibility across experiments.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
nfstream 5.2.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Scapy Packet Manipulation Tool 2.4.4rc1 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Scapy is a powerful interactive packet manipulation tool, packet generator, network scanner, network discovery tool, and packet sniffer. It provides classes to interactively create packets or sets of packets, manipulate them, send them over the wire, sniff other packets from the wire, match answers and replies, and more. Interaction is provided by the Python interpreter, so Python programming structures can be used (such as variables, loops, and functions). Report modules are possible and easy to make. It is intended to do the same things as ttlscan, nmap, hping, queso, p0f, xprobe, arping, arp-sk, arpspoof, firewalk, irpas, tethereal, tcpdump, etc.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Scapy Packet Manipulation Tool 2.4.4rc1 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 England 'Test and Trace' Program Violates GDPR Privacy Law 🕴
📖 Read
via "Dark Reading: ".
The UK government confirms the program launched in May without a Data Protection Impact Assessment, as required under GDPR.📖 Read
via "Dark Reading: ".
Dark Reading
England 'Test and Trace' Program Violates GDPR Privacy Law
The UK government confirms the program launched in May without a Data Protection Impact Assessment, as required under GDPR.
🕴 Number of Reported Breaches Decrease In First Half of 2020 🕴
📖 Read
via "Dark Reading: ".
With the pandemic as a backdrop, publicly reported US data breaches dropped as more employees and suppliers stayed home.📖 Read
via "Dark Reading: ".
Dark Reading
Number of Reported Breaches Decrease In First Half of 2020
With the pandemic as a backdrop, publicly reported US data breaches dropped as more employees and suppliers stayed home.
🕴 SIGRed: What You Should Know About the Windows DNS Server Bug 🕴
📖 Read
via "Dark Reading: ".
DNS experts share their thoughts on the wormable vulnerability and explain why it should be a high priority for businesses.📖 Read
via "Dark Reading: ".
Dark Reading
SIGRed: What You Should Know About the Windows DNS Server Bug
DNS experts share their thoughts on the wormable vulnerability and explain why it should be a high priority for businesses.
🕴 Internet Scan Shows Decline in Insecure Network Services 🕴
📖 Read
via "Dark Reading: ".
While telnet, rsync, and SMB, exposure surprisingly have dropped, proper patching and encryption adoption remain weak worldwide.📖 Read
via "Dark Reading: ".
Dark Reading
Internet Scan Shows Decline in Insecure Network Services
While telnet, rsync, and SMB, exposure surprisingly have dropped, proper patching and encryption adoption remain weak worldwide.
🕴 Twitter Breach Highlights Privileged Account Security Issue 🕴
📖 Read
via "Dark Reading: ".
Security incident that allowed attackers to hijack high-profile accounts suggests social media giant's controls for spotting insider abuse were not strong enough, security experts say.📖 Read
via "Dark Reading: ".
Dark Reading
Twitter Breach Highlights Privileged Account Security Issue
Security incident that allowed attackers to hijack high-profile accounts suggests social media giant's controls for spotting insider abuse were not strong enough, security experts say.