❌ Have I Been Pwned Set to Go Open-Source ❌
📖 Read
via "Threatpost".
Fully opening the door to allow people to contribute to – and notably, tinker with – the code for the data-breach information service will be an entirely next-level effort, according to founder Troy Hunt.📖 Read
via "Threatpost".
Threat Post
Have I Been Pwned Set to Go Open-Source
Fully opening the door to allow people to contribute to – and notably, tinker with – the code for the data-breach information service will be an entirely next-level effort, according to founder Troy Hunt.
🕴 400+ Qualcomm Chip Vulnerabilities Threaten Millions of Android Phones 🕴
📖 Read
via "Dark Reading: ".
Security researchers found hundreds of pieces of vulnerable code in the Qualcomm Snapdragon chips powering Android phones.📖 Read
via "Dark Reading: ".
Dark Reading
400+ Qualcomm Chip Vulnerabilities Threaten Millions of Android Phones
Security researchers found hundreds of pieces of vulnerable code in the Qualcomm Snapdragon chips powering Android phones.
❌ Attackers Horn in on MFA Bypass Options for Account Takeovers ❌
📖 Read
via "Threatpost".
Legacy applications don't support modern authentication -- and cybercriminals know this.📖 Read
via "Threatpost".
Threat Post
Attackers Hone in on MFA Bypass Options for Account Takeovers
Legacy applications don't support modern authentication — and cybercriminals know this.
🕴 Hacking the PLC via Its Engineering Software 🕴
📖 Read
via "Dark Reading: ".
Researcher will demonstrate at DEF CON an emerging threat to industrial control networks.📖 Read
via "Dark Reading: ".
Darkreading
Hacking the PLC via Its Engineering Software
Researcher will demonstrate at DEF CON an emerging threat to industrial control networks.
🕴 Reddit Attack Defaces Dozens of Channels 🕴
📖 Read
via "Dark Reading: ".
The attack has defaced the channels with images and content supporting Donald Trump.📖 Read
via "Dark Reading: ".
Dark Reading
Reddit Attack Defaces Dozens of Channels
The attack has defaced the channels with images and content supporting Donald Trump.
ATENTION‼ New - CVE-2020-13376
📖 Read
via "National Vulnerability Database".
SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cookie.📖 Read
via "National Vulnerability Database".
❌ Qualcomm Bugs Open 40 Percent of Android Handsets to Attack ❌
📖 Read
via "Threatpost".
Researchers identified serious flaws in Qualcomm’s Snapdragon SoC and the Hexagon architecture that impacts nearly half of Android handsets.📖 Read
via "Threatpost".
Threat Post
Qualcomm Bugs Open 40 Percent of Android Handsets to Attack
Researchers identified serious flaws in Qualcomm’s Snapdragon SoC and the Hexagon architecture that impacts nearly half of Android handsets.
ATENTION‼ New - CVE-2019-7005
📖 Read
via "National Vulnerability Database".
A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthenticated user with network access to gain sensitive information. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 through 11.0.4.2.📖 Read
via "National Vulnerability Database".
🕴 Digital Clones Could Cause Problems for Identity Systems 🕴
📖 Read
via "Dark Reading: ".
Three fundamental technologies -- chatbots, audio fakes, and deepfake videos -- have improved to the point that creating digital, real-time clones of people is merely a matter of integrating the systems.📖 Read
via "Dark Reading: ".
Dark Reading
Digital Clones Could Cause Problems for Identity Systems
Three fundamental technologies -- chatbots, audio fakes, and deepfake videos -- have improved to the point that creating digital, real-time clones of people is merely a matter of integrating the systems.
ATENTION‼ New - CVE-2019-19704
📖 Read
via "National Vulnerability Database".
In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-12781
📖 Read
via "National Vulnerability Database".
Combodo iTop contains a cross-site request forgery (CSRF) vulnerability, attackers can execute specific commands via malicious site request forgery.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-12780
📖 Read
via "National Vulnerability Database".
A security misconfiguration exists in Combodo iTop, which can expose sensitive information.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-12779
📖 Read
via "National Vulnerability Database".
Combodo iTop contains a stored Cross-site Scripting vulnerability, which can be attacked by uploading file with malicious script.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-12778
📖 Read
via "National Vulnerability Database".
Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-12777
📖 Read
via "National Vulnerability Database".
A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system information.📖 Read
via "National Vulnerability Database".
⚠ Monday review – catch up with the latest articles ⚠
📖 Read
via "Naked Security".
The latest articles and the latest Naked Security Live video - all in one place. Enjoy.📖 Read
via "Naked Security".
Naked Security
Monday review – catch up with the latest articles
The latest articles and the latest Naked Security Live video – all in one place. Enjoy.
🕴 COVID-19: Latest Security News & Commentary 🕴
📖 Read
via "Dark Reading: ".
Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.📖 Read
via "Dark Reading: ".
Dark Reading
COVID-19: Latest Security News & Commentary
Check out Dark Reading's updated, exclusive news and commentary surrounding the coronavirus pandemic.
❌ TeamViewer Flaw in Windows App Allows Password-Cracking ❌
📖 Read
via "Threatpost".
Remote, unauthenticated attackers could exploit the TeamViewer flaw to execute code and crack victims' passwords.📖 Read
via "Threatpost".
Threat Post
TeamViewer Flaw in Windows App Allows Password-Cracking
Remote, unauthenticated attackers could exploit the TeamViewer flaw to execute code and crack victims' passwords.
ATENTION‼ New - CVE-2020-13295
📖 Read
via "National Vulnerability Database".
For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-13294
📖 Read
via "National Vulnerability Database".
In GitLab before 13.0.12, 13.1.6 and 13.2.3, access grants were not revoked when a user revoked access to an application.📖 Read
via "National Vulnerability Database".