๐Ÿ›ก Cybersecurity & Privacy ๐Ÿ›ก - News
25.8K subscribers
89.2K links
๐Ÿ—ž The finest daily news on cybersecurity and privacy.

๐Ÿ”” Daily releases.

๐Ÿ’ป Is your online life secure?

๐Ÿ“ฉ lalilolalo.dev@gmail.com
Download Telegram
โš  Travel company CWT avoids ransomware derailment by paying $4.5m blackmail demand โš 

US travel company CWT has reportedly coughed up $4.5m to ransomware crooks who stole data and scrambled files.

๐Ÿ“– Read

via "Naked Security".
๐Ÿ•ด 3 Arrested for Massive Twitter Breach ๐Ÿ•ด

Three individuals aged 17, 19, and 22 have been charged for their alleged roles in the massive July 15 Twitter attack.

๐Ÿ“– Read

via "Dark Reading: ".
โŒ 4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users โŒ

The flaws have been confirmed by Grandstream, but no firmware update has yet been issued.

๐Ÿ“– Read

via "Threatpost".
ATENTIONโ€ผ New - CVE-2019-11286

VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2, contain a JMX service available to the network which does not properly restrict input. A remote authenticated malicious user may request against the service with a crafted set of credentials leading to remote code execution.

๐Ÿ“– Read

via "National Vulnerability Database".
โš  Twitter hack โ€“ three suspects charged in the US โš 

Three people have been fingered for the recent Twitter hack in which 45 high-profle accounts were taken over.

๐Ÿ“– Read

via "Naked Security".
โš  Monday review โ€“ our recent stories revisited โš 

Get yourself up to date with everything we've written in the last seven days - it's weekly roundup time.

๐Ÿ“– Read

via "Naked Security".
๐Ÿ•ด How Should I Securely Destroy/Discard My Devices? ๐Ÿ•ด

While it is possible to do data destruction in-house, doing it correctly and at scale can be tedious.

๐Ÿ“– Read

via "Dark Reading: ".
โŒ Meetup Critical Flaws Allow โ€˜Groupโ€™ Takeover, Payment Theft โŒ

Researchers disclosed critical flaws in the popular Meetup service at Black Hat USA 2020 this week, which could allow takeover of Meetup "Groups."

๐Ÿ“– Read

via "Threatpost".
๐Ÿ•ด A Patriotic Solution to the Cybersecurity Skills Shortage ๐Ÿ•ด

Why now is the right time for the security industry to invest in the human capital that will make technology better, smarter, and safer.

๐Ÿ“– Read

via "Dark Reading: ".
ATENTIONโ€ผ New - CVE-2019-4589

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and accessible to a less privileged user. IBM X-Force ID: 167449.

๐Ÿ“– Read

via "National Vulnerability Database".
ATENTIONโ€ผ New - CVE-2019-4366

IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748.

๐Ÿ“– Read

via "National Vulnerability Database".
๐Ÿ” BlackBerry launches free tool for reverse engineering to fight cybersecurity attacks ๐Ÿ”

One of the first announcements at BlackHat USA 2020 is an open-source tool to fight malware that BlackBerry first used internally and is now making available to everyone.

๐Ÿ“– Read

via "Security on TechRepublic".
๐Ÿ” How to better protect your organization against mobile threats ๐Ÿ”

The increased use of personal phones for work and the growth of mobile malware create a risk to organizations, says Gigamon.

๐Ÿ“– Read

via "Security on TechRepublic".
โŒ Black Hat USA 2020: Critical Meetup.com Flaws Reveal Common AppSec Holes โŒ

With Black Hat USA 2020 kicking off this week, Erez Yalon with Checkmarx talks about newly disclosed, critical vulnerabilities in Meetup.com - and why they are the "holy grail" for attackers.

๐Ÿ“– Read

via "Threatpost".
๐Ÿ•ด Travel Management Firm CWT Pays $4.5M to Ransomware Attackers ๐Ÿ•ด

Attackers claimed to steal two terabytes of files including financial reports, security files, and employees' personal data.

๐Ÿ“– Read

via "Dark Reading: ".
ATENTIONโ€ผ New - CVE-2019-19455

Wowza Streaming Engine through 2019-11-28 has Insecure Permissions.

๐Ÿ“– Read

via "National Vulnerability Database".
ATENTIONโ€ผ New - CVE-2019-19453

Wowza Streaming Engine through 2019-11-28 allows XSS (issue 1 of 2).

๐Ÿ“– Read

via "National Vulnerability Database".
โŒ Garmin Pays Up to Evil Corp After Ransomware Attack โ€” Reports โŒ

The ransom for the decryptor key in the WastedLocker attack could have topped $10 million, sources said.

๐Ÿ“– Read

via "Threatpost".
๐Ÿ” Survey: Barriers prevent data privacy initiatives ๐Ÿ”

Corporate culture, lack of privacy teams hurt privacy initiatives.

๐Ÿ“– Read

via "Security on TechRepublic".
๐Ÿ›  Samhain File Integrity Checker 4.4.2 ๐Ÿ› 

Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.

๐Ÿ“– Go!

via "Security Tool Files โ‰ˆ Packet Storm".