πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
ATENTIONβ€Ό New - CVE-2019-16374

Pega Platform 8.2.1 allows LDAP injection because a username can contain a * character and can be of unlimited length. An attacker can specify four characters of a username, followed by the * character, to bypass access control.

πŸ“– Read

via "National Vulnerability Database".
❌ New Global Threat Landscape Report Reveals β€˜Unprecedented’ Cyberattacks ❌

Fortinet's recently released Global Threat Landscape Report shows how the perimeter is extending to the home in the first half of 2020 - and what that means for cybercrime.

πŸ“– Read

via "Threatpost".
πŸ•΄ Black Hat USA 2020 Shines Spotlight on the Mental Challenges of Cybersecurity πŸ•΄

Infosec practitioners face a variety of mental struggles in areas such as awareness training, problem solving, or general mental health. Several sessions at Black Hat USA 2020 highlighted these challenges and how to overcome them.

πŸ“– Read

via "Dark Reading: ".
πŸ” How hospitals can better protect themselves against data breaches πŸ”

Healthcare data breaches have fallen this year but could surge over the next few months as hospital records remain a top target, says CI Security.

πŸ“– Read

via "Security on TechRepublic".
πŸ” How to hide files from any file manager on the Linux desktop πŸ”

Want to hide files and folders from your Linux desktop file manager? Jack Wallen shows you one handy method.

πŸ“– Read

via "Security on TechRepublic".
πŸ” Report: Unskilled hackers can breach about 3 out of 4 companies πŸ”

Positive Technologies found in a recent study that criminals with few skills can hack a company in less than 30 minutes.

πŸ“– Read

via "Security on TechRepublic".
❌ Zoom Faces More Legal Challenges Over End-to-End Encryption ❌

The video-conferencing specialist has yet to roll out full encryption, but it says it's working on it.

πŸ“– Read

via "Threatpost".
⚠ Tor and anonymous browsing – just how safe is it? ⚠

How to stay safe when you're using Tor, even if the network is littered with rogues.

πŸ“– Read

via "Naked Security".
πŸ•΄ NSA & FBI Disclose New Russian Cyberespionage Malware πŸ•΄

APT 28, aka Fancy Bear, is deploying the Drovorub malware designed for Linux systems as part of cyber-espionage operations.

πŸ“– Read

via "Dark Reading: ".
πŸ” Weak and infrequent cyber-crisis training is leaving companies vulnerable, new research says πŸ”

Companies are too reliant on dated software, the most essential-to-crises staff aren't required attendance at cybersecurity training, and the pandemic exacerbated problems, according to a new report.

πŸ“– Read

via "Security on TechRepublic".
πŸ” US and UK workers still logging 2 extra hours every day, according to VPN data πŸ”

People in Europe and Canada have gone back to the hours they were working before the coronavirus shutdown.

πŸ“– Read

via "Security on TechRepublic".
πŸ›  Wireshark Analyzer 3.2.6 πŸ› 

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. This is the source code release.

πŸ“– Go!

via "Security Tool Files β‰ˆ Packet Storm".
πŸ•΄ Secure Development Takes a (Remote) Village πŸ•΄

The shift to work from home isn't just about giving your Dev team the physical tools they need.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2020-0261

In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146059841

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Boeing's DEF CON Debut a Sign of the Times πŸ•΄

In the wake of a stalemate between the airplane manufacturer and a security researcher over vulns found in its 787 aircraft's network, Boeing says it's ready to "embrace" the hacker community.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ The Race to Hack a Satellite at DEF CON πŸ•΄

Eight teams competed to win cash, bragging rights, and the chance to control a satellite in space.

πŸ“– Read

via "Dark Reading: ".
πŸ” Zero trust is critical, but very underused πŸ”

Organizations must quickly adopt the zero trust mindset of "never trust, always verify" to mitigate the spread of breaches, limit access, and prevent lateral movement, according to an Illumio report.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ RedCurl APT Group Hacks Global Companies for Corporate Espionage πŸ•΄

Researchers analyze a presumably Russian-speaking APT group that has been stealing corporate data since 2018.

πŸ“– Read

via "Dark Reading: ".
πŸ” New Phishing Campaign Targets SBA COVID-19 Loan Relief Accounts πŸ”

Scams targeting small businesses are unfortunately commonplace these days. The latest attempts to phish business owners' SBA loan relief logins.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
❌ CactusPete APT Hones Toolset, Resurfaces with New Espionage Targets ❌

The APT is becoming more sophisticated over time.

πŸ“– Read

via "Threatpost".
πŸ•΄ Business Email Compromise Attacks Involving MFA Bypass Increase πŸ•΄

Adversaries are using legacy email clients to access and take over accounts protected with strong authentication, Abnormal Security says.

πŸ“– Read

via "Dark Reading: ".