🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🔐 How to manage app permissions in Android 11 🔐

With your Android device upgraded to version 11, you'll want to get control of app permissions. Jack Wallen shows you how.

📖 Read

via "Security on TechRepublic".
Razer Gaming Fans Caught Up in Data Leak

A cloud misconfiguration at the gaming-gear merchant potentially exposed 100,000 customers to phishing and fraud.

📖 Read

via "Threatpost".
Microsoft Warns of Cyberattacks on Trump, Biden Election Campaigns

Just months before the U.S. presidential election, hackers from Russia, China and Iran are ramping up phishing and malware attacks against campaign staffers.

📖 Read

via "Threatpost".
🕴 ThreatConnect Buys Nehemiah Security 🕴

Threat intelligence firm adds Nehemiah's Risk Quantifier to its platform.

📖 Read

via "Dark Reading: ".
🕴 6 Lessons IT Security Can Learn From DevOps 🕴

DevOps has taken over enterprise software development. The discipline has lessons for IT security -- here are a quick half-dozen.

📖 Read

via "Dark Reading: ".
🕴 Two Years on from GDPR: Has It Driven Growth in Cybersecurity Insurance? 🕴

Whilst GDPR has put the spotlight on data privacy and cyber issues, there are other more prominent trends that are driving a greater take-up of cyber insurance, says Ben Maidment, Class Underwriter - Cyber, Physical & Technology at Brit Insurance.

📖 Read

via "Dark Reading: ".
🕴 US Sanctions Russian Attackers for 2020 Election Interference 🕴

The move comes as Microsoft publishes research on attack groups and activity attempting to target the Biden and Trump campaigns.

📖 Read

via "Dark Reading: ".
🕴 Cyber-Risks Explode With Move to Telehealth Services 🕴

The hasty shift to online delivery of primary care services since the COVID-19 outbreak has attracted significant attacker interest.

📖 Read

via "Dark Reading: ".
ATENTION New - CVE-2014-1420

On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the O_EXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by symlink and hardlink restrictions in Ubuntu. Fixed in 1.1.1188+14.10.20140813.4-0ubuntu1.

📖 Read

via "National Vulnerability Database".
🕴 Fraud Prevention During the Pandemic 🕴

When the economy is disrupted, fraud goes up, so let's not ignore the lessons we can learn from previous downturns.

📖 Read

via "Dark Reading: ".
🔏 Friday Five 9/11 🔏

Initial access brokers, scam domain names, and Brazil's new data protection law - catch up on the week's news with the Friday Five.

📖 Read

via "Subscriber Blog RSS Feed ".
Serious Security: Hacking Windows passwords via your wallpaper

Themes and wallpapers - how dangerous can they really be?

📖 Read

via "Naked Security".
🕴 Spear-Phishers Leverage Office 365 Ecosystem to Validate Stolen Creds in Real Time 🕴

New attack technique uses Office 365 APIs to cross-check credentials against Azure Active Directory as victim types them in.

📖 Read

via "Dark Reading: ".
ATENTION New - CVE-2018-19948

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery (CSRF) vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2018-19947

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2018-19946

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

📖 Read

via "National Vulnerability Database".
WordPress Plugin Flaw Allows Attackers to Forge Emails

The high-severity flaw in the Email Subscribers & Newsletters plugin by Icegram affects more than 100,000 WordPress websites.

📖 Read

via "Threatpost".
🔐 Microsoft detects wave of cyberattacks two months before US presidential election 🔐

Hacker groups are ramping up activity as the US heads into the peak of election season. The latest attacks at times bear hallmarks similar to those seen in 2016.

📖 Read

via "Security on TechRepublic".
🔐 How to limit file upload size on NGINX to mitigate DoS attacks 🔐

If you have an NGINX site that must allow users to upload files, try this configuration to help prevent possible Denial-of-Service attacks.

📖 Read

via "Security on TechRepublic".
🔐 How to patch CentOS against BootHole 🔐

If you have CentOS servers in your data center, you'll want to make sure to patch them against BootHole. Jack Wallen shows you how.

📖 Read

via "Security on TechRepublic".
🔐 How to hide files from any file manager on the Linux desktop 🔐

Want to hide files and folders from your Linux desktop file manager? Jack Wallen shows you one handy method.

📖 Read

via "Security on TechRepublic".