❌ Maze Ransomware Adopts Ragnar Locker Virtual-Machine Approach ❌
📖 Read
via "Threatpost".
Maze continues to adopt tactics from rival cybercrime gangs.📖 Read
via "Threatpost".
Threat Post
Maze Ransomware Adopts Ragnar Locker Virtual-Machine Approach
Maze continues to adopt tactics from rival cybercrime gangs.
🔐 TikTok and WeChat to be banned from US app stores starting Sunday 🔐
📖 Read
via "Security on TechRepublic".
Users in the US would be unable to download the two Chinese-owned apps from local app stores, according to the Department of Commerce.📖 Read
via "Security on TechRepublic".
TechRepublic
TikTok and WeChat to be banned from US app stores starting Sunday
Users in the US would be unable to download the two Chinese-owned apps from local app stores, according to the Department of Commerce.
❌ Security Takeaways from the Great Work-from-Home Experiment ❌
📖 Read
via "Threatpost".
As the pandemic drags on and remote workforces stay remote, zero-trust and other lessons learned should come to the fore.📖 Read
via "Threatpost".
Threat Post
Security Takeaways from the Great Work-from-Home Experiment
As the pandemic drags on and remote workforces stay remote, zero-trust and other lessons learned should come to the fore.
ATENTION‼ New - CVE-2020-0272
📖 Read
via "National Vulnerability Database".
In libhwbinder, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-130166487📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0271
📖 Read
via "National Vulnerability Database".
In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144507081📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0269
📖 Read
via "National Vulnerability Database".
In Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-151645626📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0268
📖 Read
via "National Vulnerability Database".
In NFC, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-148294643📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0265
📖 Read
via "National Vulnerability Database".
In Telephony, there are possible leaks of sensitive data due to missing permission checks. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150155839📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0263
📖 Read
via "National Vulnerability Database".
In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154913130📖 Read
via "National Vulnerability Database".
❌ SecOps Teams Wrestle with Manual Processes, HR Gaps ❌
📖 Read
via "Threatpost".
Enterprise security teams are "drowning in alerts."📖 Read
via "Threatpost".
Threat Post
SecOps Teams Wrestle with Manual Processes, HR Gaps
Enterprise security teams are "drowning in alerts."
🔐 How to encrypt files on your Linux servers with gocryptfs 🔐
📖 Read
via "Security on TechRepublic".
Looking for an easy to use encryption tool to protect data on your Linux servers? Jack Wallen shows you how to install and use gocryptfs to serve that very purpose.📖 Read
via "Security on TechRepublic".
TechRepublic
How to encrypt files on your Linux servers with gocryptfs
Looking for an easy to use encryption tool to protect data on your Linux servers? Jack Wallen shows you how to install and use gocryptfs to serve that very purpose.
🕴 Deadly Ransomware Story Continues to Unfold 🕴
📖 Read
via "Dark Reading: ".
A ransomware attack with fatal consequences is attracting notice and comment from around the world.📖 Read
via "Dark Reading: ".
Dark Reading
Deadly Ransomware Story Continues to Unfold
A ransomware attack with fatal consequences is attracting notice and comment from around the world.
🕴 A Hacker's Playlist 🕴
📖 Read
via "Dark Reading: ".
Nine security researchers share their favorite songs and genres.📖 Read
via "Dark Reading: ".
Dark Reading
A Hacker's Playlist
Nine security researchers share their favorite songs and genres.
❌ Stubborn WooCommerce Plugin Bugs Get Third Patch ❌
📖 Read
via "Threatpost".
Users of the Discount Rules for WooCommerce WordPress plugin are urged to apply a third and (hopefully) final patch.📖 Read
via "Threatpost".
Threat Post
Stubborn WooCommerce Plugin Bug Gets Third Patch
Users of the Discount Rules for WooCommerce WordPress plugin are urged to apply a third and (hopefully) final patch.
❌ The TikTok Ban: Security Experts Weigh in on the App’s Risks ❌
📖 Read
via "Threatpost".
With no hard evidence of abuse, are bans warranted? The real security concerns will likely come after the ban goes into effect, researchers said in our exclusive roundtable.📖 Read
via "Threatpost".
Threat Post
UPDATE – TikTok Ban: Security Experts Weigh in on the App’s Risks
With no hard evidence of abuse, are bans warranted? The real security concerns will likely come after the ban goes into effect, researchers said in our exclusive roundtable.
⚠ Naked Security Live – “The Zerologon hole: are you at risk?” ⚠
📖 Read
via "Naked Security".
Naked Security Live - here's the recorded version of our latest video. Enjoy.📖 Read
via "Naked Security".
Naked Security
Naked Security Live – “The Zerologon hole: are you at risk?”
Naked Security Live – here’s the recorded version of our latest video. Enjoy.
🔐 Windows Server: Patch this critical flaw now says Homeland Security in emergency warning 🔐
📖 Read
via "Security on TechRepublic".
Government agencies in the US have until today to patch a Windows Server vulnerability that could give hackers control over federal networks.📖 Read
via "Security on TechRepublic".
TechRepublic
Patch this critical software flaw now, says Homeland Security in emergency warning
Government agencies in the US have until today to patch a Windows Server vulnerability that could give hackers control over federal networks.
🕴 Hacking Yourself: Marie Moe and Pacemaker Security 🕴
📖 Read
via "Dark Reading: ".
Future consumer devices, including pacemakers, should be built with security from the start.📖 Read
via "Dark Reading: ".
Dark Reading
Hacking Yourself: Marie Moe and Pacemaker Security
Future consumer devices, including pacemakers, should be built with security from the start.
🕴 5 Steps to Greater Cyber Resiliency 🕴
📖 Read
via "Dark Reading: ".
Work from home isn't going away anytime soon, and the increased vulnerability means cyber resiliency will continue to be critical to business resiliency.📖 Read
via "Dark Reading: ".
Dark Reading
5 Steps to Greater Cyber Resiliency
Work from home isn't going away anytime soon, and the increased vulnerability means cyber resiliency will continue to be critical to business resiliency.