⚠ A real-life Maze ransomware attack – “If at first you don’t succeed…” ⚠
📖 Read
via "Naked Security".
The crooks wanted $15,000,000. They didn't get it. Huzzah!📖 Read
via "Naked Security".
Naked Security
A real-life Maze ransomware attack – “If at first you don’t succeed…”
The crooks wanted $15,000,000. They didn’t get it. Huzzah!
ATENTION‼ New - CVE-2020-0262
📖 Read
via "National Vulnerability Database".
In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156353008📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0089
📖 Read
via "National Vulnerability Database".
In the audio server, there is a missing permission check. This could lead to local escalation of privilege regarding audio settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-137015603📖 Read
via "National Vulnerability Database".
❌ Maze Ransomware Adopts Ragnar Locker Virtual-Machine Approach ❌
📖 Read
via "Threatpost".
Maze continues to adopt tactics from rival cybercrime gangs.📖 Read
via "Threatpost".
Threat Post
Maze Ransomware Adopts Ragnar Locker Virtual-Machine Approach
Maze continues to adopt tactics from rival cybercrime gangs.
🔐 TikTok and WeChat to be banned from US app stores starting Sunday 🔐
📖 Read
via "Security on TechRepublic".
Users in the US would be unable to download the two Chinese-owned apps from local app stores, according to the Department of Commerce.📖 Read
via "Security on TechRepublic".
TechRepublic
TikTok and WeChat to be banned from US app stores starting Sunday
Users in the US would be unable to download the two Chinese-owned apps from local app stores, according to the Department of Commerce.
❌ Security Takeaways from the Great Work-from-Home Experiment ❌
📖 Read
via "Threatpost".
As the pandemic drags on and remote workforces stay remote, zero-trust and other lessons learned should come to the fore.📖 Read
via "Threatpost".
Threat Post
Security Takeaways from the Great Work-from-Home Experiment
As the pandemic drags on and remote workforces stay remote, zero-trust and other lessons learned should come to the fore.
ATENTION‼ New - CVE-2020-0272
📖 Read
via "National Vulnerability Database".
In libhwbinder, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-130166487📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0271
📖 Read
via "National Vulnerability Database".
In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144507081📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0269
📖 Read
via "National Vulnerability Database".
In Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151645626📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0268
📖 Read
via "National Vulnerability Database".
In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-148294643📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0265
📖 Read
via "National Vulnerability Database".
In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150155839📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0263
📖 Read
via "National Vulnerability Database".
In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913130📖 Read
via "National Vulnerability Database".
❌ SecOps Teams Wrestle with Manual Processes, HR Gaps ❌
📖 Read
via "Threatpost".
Enterprise security teams are "drowning in alerts."📖 Read
via "Threatpost".
Threat Post
SecOps Teams Wrestle with Manual Processes, HR Gaps
Enterprise security teams are "drowning in alerts."
🔐 How to encrypt files on your Linux servers with gocryptfs 🔐
📖 Read
via "Security on TechRepublic".
Looking for an easy to use encryption tool to protect data on your Linux servers? Jack Wallen shows you how to install and use gocryptfs to serve that very purpose.📖 Read
via "Security on TechRepublic".
TechRepublic
How to encrypt files on your Linux servers with gocryptfs
Looking for an easy to use encryption tool to protect data on your Linux servers? Jack Wallen shows you how to install and use gocryptfs to serve that very purpose.
🕴 Deadly Ransomware Story Continues to Unfold 🕴
📖 Read
via "Dark Reading: ".
A ransomware attack with fatal consequences is attracting notice and comment from around the world.📖 Read
via "Dark Reading: ".
Dark Reading
Deadly Ransomware Story Continues to Unfold
A ransomware attack with fatal consequences is attracting notice and comment from around the world.
🕴 A Hacker's Playlist 🕴
📖 Read
via "Dark Reading: ".
Nine security researchers share their favorite songs and genres.📖 Read
via "Dark Reading: ".
Dark Reading
A Hacker's Playlist
Nine security researchers share their favorite songs and genres.
❌ Stubborn WooCommerce Plugin Bugs Get Third Patch ❌
📖 Read
via "Threatpost".
Users of the Discount Rules for WooCommerce WordPress plugin are urged to apply a third and (hopefully) final patch.📖 Read
via "Threatpost".
Threat Post
Stubborn WooCommerce Plugin Bug Gets Third Patch
Users of the Discount Rules for WooCommerce WordPress plugin are urged to apply a third and (hopefully) final patch.
❌ The TikTok Ban: Security Experts Weigh in on the App’s Risks ❌
📖 Read
via "Threatpost".
With no hard evidence of abuse, are bans warranted? The real security concerns will likely come after the ban goes into effect, researchers said in our exclusive roundtable.📖 Read
via "Threatpost".
Threat Post
UPDATE – TikTok Ban: Security Experts Weigh in on the App’s Risks
With no hard evidence of abuse, are bans warranted? The real security concerns will likely come after the ban goes into effect, researchers said in our exclusive roundtable.
⚠ Naked Security Live – “The Zerologon hole: are you at risk?” ⚠
📖 Read
via "Naked Security".
Naked Security Live - here's the recorded version of our latest video. Enjoy.📖 Read
via "Naked Security".
Naked Security
Naked Security Live – “The Zerologon hole: are you at risk?”
Naked Security Live – here’s the recorded version of our latest video. Enjoy.