🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕴 Managed IT Providers: The Cyber-Threat Actors' Gateway to SMBs 🕴

Criminals have made MSPs a big target of their attacks. That should concern small and midsize businesses a great deal.

📖 Read

via "Dark Reading: ".
🕴 Think You're Spending Enough on Security? 🕴

While the amount will vary from organization to organization, here are four ways for everyone to evaluate whether they're allocating the right amount of money and resources.

📖 Read

via "Dark Reading: ".
🔏 How to Mitigate a DDoS Attack 🔏

Following a rash of targeted denial-of-service (DoS) and distributed denial-of-service (DDoS) attacks worldwide, countries are offering guidance.

📖 Read

via "Subscriber Blog RSS Feed ".
ATENTION New - CVE-2018-17145

Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.

📖 Read

via "National Vulnerability Database".
🕴 Zoom Brings Two-Factor Authentication to All Users 🕴

This marks the latest step Zoom has taken to improve user security as more employees work from home.

📖 Read

via "Dark Reading: ".
🔐 How to manage app permissions in Android 11 🔐

With your Android device upgraded to version 11, you'll want to get control of app permissions. Jack Wallen shows you how.

📖 Read

via "Security on TechRepublic".
Razer Gaming Fans Caught Up in Data Leak

A cloud misconfiguration at the gaming-gear merchant potentially exposed 100,000 customers to phishing and fraud.

📖 Read

via "Threatpost".
Microsoft Warns of Cyberattacks on Trump, Biden Election Campaigns

Just months before the U.S. presidential election, hackers from Russia, China and Iran are ramping up phishing and malware attacks against campaign staffers.

📖 Read

via "Threatpost".
🕴 ThreatConnect Buys Nehemiah Security 🕴

Threat intelligence firm adds Nehemiah's Risk Quantifier to its platform.

📖 Read

via "Dark Reading: ".
🕴 6 Lessons IT Security Can Learn From DevOps 🕴

DevOps has taken over enterprise software development. The discipline has lessons for IT security -- here are a quick half-dozen.

📖 Read

via "Dark Reading: ".
🕴 Two Years on from GDPR: Has It Driven Growth in Cybersecurity Insurance? 🕴

Whilst GDPR has put the spotlight on data privacy and cyber issues, there are other more prominent trends that are driving a greater take-up of cyber insurance, says Ben Maidment, Class Underwriter - Cyber, Physical & Technology at Brit Insurance.

📖 Read

via "Dark Reading: ".
🕴 US Sanctions Russian Attackers for 2020 Election Interference 🕴

The move comes as Microsoft publishes research on attack groups and activity attempting to target the Biden and Trump campaigns.

📖 Read

via "Dark Reading: ".
🕴 Cyber-Risks Explode With Move to Telehealth Services 🕴

The hasty shift to online delivery of primary care services since the COVID-19 outbreak has attracted significant attacker interest.

📖 Read

via "Dark Reading: ".
ATENTION New - CVE-2014-1420

On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the O_EXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by symlink and hardlink restrictions in Ubuntu. Fixed in 1.1.1188+14.10.20140813.4-0ubuntu1.

📖 Read

via "National Vulnerability Database".
🕴 Fraud Prevention During the Pandemic 🕴

When the economy is disrupted, fraud goes up, so let's not ignore the lessons we can learn from previous downturns.

📖 Read

via "Dark Reading: ".
🔏 Friday Five 9/11 🔏

Initial access brokers, scam domain names, and Brazil's new data protection law - catch up on the week's news with the Friday Five.

📖 Read

via "Subscriber Blog RSS Feed ".
Serious Security: Hacking Windows passwords via your wallpaper

Themes and wallpapers - how dangerous can they really be?

📖 Read

via "Naked Security".
🕴 Spear-Phishers Leverage Office 365 Ecosystem to Validate Stolen Creds in Real Time 🕴

New attack technique uses Office 365 APIs to cross-check credentials against Azure Active Directory as victim types them in.

📖 Read

via "Dark Reading: ".
ATENTION New - CVE-2018-19948

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery (CSRF) vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2018-19947

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2018-19946

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

📖 Read

via "National Vulnerability Database".