πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΄ Safeguarding Schools Against RDP-Based Ransomware πŸ•΄

How getting online learning right today will protect schools, and the communities they serve, for years to come.

πŸ“– Read

via "Dark Reading".
πŸ•΄ 9 Tips to Prepare for the Future of Cloud & Network Security πŸ•΄

Cloud and network security analysts outline trends and priorities businesses should keep top of mind as they grow more reliant on cloud.

πŸ“– Read

via "Dark Reading".
⚠ REvil ransomware crew dangles $1,000,000 cybercrime carrot ⚠

When a company pays a multimillion dollar ransomware blackmail demand, where do you think the money goes?

πŸ“– Read

via "Naked Security".
❌ Joker Trojans Flood the Android Ecosystem ❌

September saw dozens of Joker malware variants hitting Google Play and third-party app stores.

πŸ“– Read

via "Threat Post".
πŸ›  Sifter 10_r2 πŸ› 

Sifter is a osint, recon, and vulnerability scanner. It combines a plethora of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the blue vulnerabilities within Microsoft systems and if unpatched, exploits them.

πŸ“– Read

via "Packet Storm Security".
🦿 How to install common security tools via Homebrew on a Mac 🦿

We'll guide you through the process of using Homebrew package manager to install common security tools on macOS computers to assess and aid in hardening devices on your network.

πŸ“– Read

via "Tech Republic".
❌ Universal Health Services Ransomware Attack Impacts Hospitals Nationwide ❌

The Ryuk ransomware is suspected to be the culprit.

πŸ“– Read

via "Threat Post".
πŸ” Ransomware Reportedly Behind Nationwide UHS Hospital Outage πŸ”

The full scope of the incident isn't yet known but as a result, many facilities have been left without access to computer systems.

πŸ“– Read

via "Digital Guardian".
❌ Mac, Linux Users Now Targeted by FinSpy Variants ❌

FinSpy has returned in new campaigns targeting dissident organizations in Egypt - and researchers uncovered new samples of the spyware targeting macOS and Linux users.

πŸ“– Read

via "Threat Post".
❌ Windows 7 β€˜Upgrade’ Emails Steal Outlook Credentials ❌

Researchers warn of emails pretending to help business employees upgrade to Windows 10 - and then stealing their Outlook emails and passwords.

πŸ“– Read

via "Threat Post".
🦿 How companies can meet the needs of the future workforce 🦿

The workforce is changing in the wake of a global pandemic. Learn some insights from industry executives about what companies and employees should be doing to evolve accordingly.

πŸ“– Read

via "Tech Republic".
πŸ•΄ Ivanti Acquires Two Security Companies πŸ•΄

Purchase of MobilIron and Pulse Secure announced simultaneously.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2020-25770 β€Ό

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24564 and CVE-2020-25771.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-24565 β€Ό

An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24564 and CVE-2020-25770.

πŸ“– Read

via "National Vulnerability Database".
❌ Telehealth Poll: How Risky Are Remote Doctor Visits? ❌

Threatpost's latest poll probes telehealth security risks and asks for IT cures.

πŸ“– Read

via "Threat Post".
πŸ•΄ The Shared Irresponsibility Model in the Cloud Is Putting You at Risk πŸ•΄

Step up, put the architecture and organization in place, and take responsibility. If you don't, who will?

πŸ“– Read

via "Dark Reading".
πŸ•΄ State-Sponsored Groups Increasingly Use Cloud & Open Source Infrastructure πŸ•΄

Microsoft shuts down Azure Active Directory instances used by attackers to evade detection and warns that the use of open source tools by espionage groups is growing.

πŸ“– Read

via "Dark Reading".
❌ Las Vegas Students’ Personal Data Leaked, Post-Ransomware Attack ❌

A researcher said he discovered an open data cache with names, grades, birthdates and more, after the Clark County School District refused to pay the ransom.

πŸ“– Read

via "Threat Post".
🦿 How to handle security risks in a hybrid work environment 🦿

Half of the organizations surveyed by Tessian were hit by a security incident while employees were working remotely. Here are some tips for mitigation.

πŸ“– Read

via "Tech Republic".
β€Ό CVE-2020-4607 β€Ό

IBM Security Secret Server (IBM Security Verify Privilege Vault Remote 1.2 ) could allow a local user to bypass security restrictions due to improper input validation. IBM X-Force ID: 184884.

πŸ“– Read

via "National Vulnerability Database".
❌ The Network Perimeter: This Time, It’s Personal ❌

Botnets and IoT devices are forming a perfect storm for IT staff wrestling with WFH employee security.

πŸ“– Read

via "Threat Post".