ATENTIONβΌ New - CVE-2020-10924
π Read
via "National Vulnerability Database".
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the UPnP service, which listens on TCP port 5000 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9643.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2020-10923
π Read
via "National Vulnerability Database".
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000. A crafted UPnP message can be used to bypass authentication. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-9642.π Read
via "National Vulnerability Database".
π΄ Avon Server Leaks User Info and Administrative Data π΄
π Read
via "Dark Reading: ".
An unprotected server has exposed more than 7GB of data from the beauty brand.π Read
via "Dark Reading: ".
Dark Reading
Avon Server Leaks User Info and Administrative Data
An unprotected server has exposed more than 7GB of data from the beauty brand.
β Lazarus Group Brings APT Tactics to Ransomware β
π Read
via "Threatpost".
A new ransomware, VHD, was seen being delivered by the nation-state group's multiplatform malware platform, MATA.π Read
via "Threatpost".
Threat Post
Lazarus Group Brings APT Tactics to Ransomware
A new ransomware, VHD, was seen being delivered by the nation-state group's multiplatform malware platform, MATA.
π΄ Lazarus Group Shifts Gears with Custom Ransomware π΄
π Read
via "Dark Reading: ".
The North Korea-linked APT group has developed its own ransomware strain to better conduct financial theft, researchers report.π Read
via "Dark Reading: ".
Dark Reading
Lazarus Group Shifts Gears with Custom Ransomware
The North Korea-linked APT group has developed its own ransomware strain to better conduct financial theft, researchers report.
ATENTIONβΌ New - CVE-2020-10985
π Read
via "National Vulnerability Database".
Gambio GX before 4.0.1.0 allows XSS in admin/coupon_admin.php.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2020-10984
π Read
via "National Vulnerability Database".
Gambio GX before 4.0.1.0 allows admin/admin.php CSRF.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2020-10983
π Read
via "National Vulnerability Database".
Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2020-10982
π Read
via "National Vulnerability Database".
Gambio GX before 4.0.1.0 allows SQL Injection in admin/gv_mail.php.π Read
via "National Vulnerability Database".
π IBM finds cyberattacks costing companies nearly $4 million per breach π
π Read
via "Security on TechRepublic".
The study showed concrete financial benefits to having security systems and teams in place.π Read
via "Security on TechRepublic".
TechRepublic
IBM finds cyberattacks costing companies nearly $4 million per breach
The study showed concrete financial benefits to having security systems and teams in place.
π The future of encryption: Getting ready for the quantum computer attack π
π Read
via "Security on TechRepublic".
PQShield, a spin-out from the UK's Oxford University, is developing advanced cryptographic solutions for hardware, software and communications to protect businesses' data from the quantum threat.π Read
via "Security on TechRepublic".
TechRepublic
The future of encryption: Getting ready for the quantum computer attack
PQShield, a spin-out from the UK's Oxford University, is developing advanced cryptographic solutions for hardware, software and communications to protect businesses' data from the quantum threat.
β OkCupid Security Flaw Threatens Intimate Dater Details β
π Read
via "Threatpost".
Attackers could exploit various flaws in OkCupid's mobile app and webpage to steal victims' sensitive data and even send messages out from their profiles.π Read
via "Threatpost".
Threat Post
OkCupid Security Flaw Threatens Intimate Dater Details
Attackers could have exploited various flaws in OkCupid's mobile app and webpage to steal victims' sensitive data and even send messages out from their profiles.
β Facial-Recognition Flop: Face Masks Thwart Virus, Stump Security Systems β
π Read
via "Threatpost".
Algorithms clocked error rates of between 5% to 50% when comparing photos of people wearing digitally created masks with unmasked faces.π Read
via "Threatpost".
Threat Post
Facial-Recognition Flop: Face Masks Thwart Virus, Stump Security Systems
Algorithms clocked error rates of between 5% to 50% when comparing photos of people wearing digitally created masks with unmasked faces.
π 87% of Americans view data privacy as a human right, but most still use risky security practices π
π Read
via "Security on TechRepublic".
While 56% of Americans want more control over personal data, more than 40% said they reuse passwords, use public Wi-Fi, or save a credit card to an online store, KPMG found.π Read
via "Security on TechRepublic".
π΄ The Future's Biggest Cybercrime Threat May Already Be Here π΄
π Read
via "Dark Reading: ".
Current attacks will continue to be refined, and what may seem a weakness now could turn out to be a disaster.π Read
via "Dark Reading: ".
Dark Reading
The Future's Biggest Cybercrime Threat May Already Be Here
Current attacks will continue to be refined, and what may seem a weakness now could turn out to be a disaster.
π How to protect your website's database from hackers π
π Read
via "Security on TechRepublic".
A recent investigation by NordPass and a white hat hacker discovered more than 9,000 unsecured databases online with more than 10 billion individual entries.π Read
via "Security on TechRepublic".
TechRepublic
How to protect your website's database from hackers
A recent investigation by NordPass and a white hat hacker discovered more than 9,000 unsecured databases online with more than 10 billion individual entries.
π΄ How to Decipher InfoSec Job Titles' Mysteries π΄
π Read
via "Dark Reading: ".
Figuring out which cybersecurity job you want -- or are qualified for -- can be difficult when words have no consistent meaning in the industry.π Read
via "Dark Reading: ".
Dark Reading
How to Decipher InfoSec Job Titles' Mysteries
Figuring out which cybersecurity job you want -- or are qualified for -- can be difficult when words have no consistent meaning in the industry.
π How IT leaders were unprepared for the security challenges posed by COVID-19 π
π Read
via "Security on TechRepublic".
The top three challenges cited in a Tanium survey were identifying new computing devices, overwhelmed IT capacity due to VPN requirements, and increased risks from video conferencing.π Read
via "Security on TechRepublic".
TechRepublic
How IT leaders were unprepared for the security challenges posed by COVID-19
The top three challenges cited in a Tanium survey were identifying new computing devices, overwhelmed IT capacity due to VPN requirements, and increased risks from video conferencing.
π Most consumers do not trust big tech with their privacy π
π Read
via "Security on TechRepublic".
Social media and online shopping sites top the list of services consumers feel do not adequately protect their personal information.π Read
via "Security on TechRepublic".
TechRepublic
Most consumers do not trust big tech with their privacy
Social media and online shopping sites top the list of services consumers feel do not adequately protect their personal information.
π It's not OK, Cupid: Security flaws could expose user data and more π
π Read
via "Security on TechRepublic".
Researchers found a number of vulnerabilities that could give attackers access to a treasure trove of personally identifying information about members.π Read
via "Security on TechRepublic".
TechRepublic
It's not OK, Cupid: Security flaws could expose user data and more
Researchers found a number of vulnerabilities that could give attackers access to a treasure trove of personally identifying information about members.
β US tax service says, β2FA is a must!β β
π Read
via "Naked Security".
We know it's an old drum, but we're not tired of beating it yet: 2FA is your friend.π Read
via "Naked Security".
Naked Security
US tax service says, β2FA is a must!β
We know itβs an old drum, but weβre not tired of beating it yet: 2FA is your friend.