๐ 50 Colleges Where You Can Get a Cybersecurity Degree Online Now ๐
๐ Read
via "Digital Guardian".
You can gain many valuable cybersecurity skills online now. To celebrate National Cyber Security Awareness Month (NCSAM) we put together a list of 50 schools offering cybersecurity degrees online.๐ Read
via "Digital Guardian".
Digital Guardian
50 Colleges Where You Can Get a Cybersecurity Degree Online Now
You can gain many valuable cybersecurity skills online now. To celebrate National Cyber Security Awareness Month (NCSAM) we put together a list of 50 schools offering cybersecurity degrees online.
๐ Raptor WAF 0.61 ๐
๐ Read
via "Packet Storm Security".
Raptor is a web application firewall written in C that uses DFA to block SQL injection, cross site scripting, and path traversals.๐ Read
via "Packet Storm Security".
Packetstormsecurity
Raptor WAF 0.61 โ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
โผ CVE-2018-20243 โผ
๐ Read
via "National Vulnerability Database".
The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomration is available in fineract jira issues 726 and 629.๐ Read
via "National Vulnerability Database".
โผ CVE-2020-15251 โผ
๐ Read
via "National Vulnerability Database".
In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass vulnerability.๐ Read
via "National Vulnerability Database".
โ Lemon Duck Cryptocurrency-Mining Botnet Activity Spikes โ
๐ Read
via "Threat Post".
Researchers warn of a spike in the cryptocurrency-mining botnet since August 2020.๐ Read
via "Threat Post".
Threat Post
Lemon Duck Cryptocurrency-Mining Botnet Activity Spikes
Researchers warn of a spike in the cryptocurrency-mining botnet since August 2020.
๐ด Coalition Pokes Five Eyes on Call for Backdoors ๐ด
๐ Read
via "Dark Reading".
The Five Eyes international law enforcement group had called for implementing backdoors for law enforcement in all encryption implementations.๐ Read
via "Dark Reading".
Dark Reading
Coalition Pokes Five Eyes on Call for Backdoors
The Five Eyes international law enforcement group had called for implementing backdoors for law enforcement in all encryption implementations.
๐ด Microsoft Fixes Critical Windows TCP/IP Flaw in Patch Rollout ๐ด
๐ Read
via "Dark Reading".
The October 2020 Patch Tuesday fixed 87 vulnerabilities, including 21 remote code execution flaws, in Microsoft products and services.๐ Read
via "Dark Reading".
Darkreading
Microsoft Fixes Critical Windows TCP/IP Flaw in Patch Rollout
The October 2020 Patch Tuesday fixed 87 vulnerabilities, including 21 remote code execution flaws, in Microsoft products and services.
โผ CVE-2020-25645 โผ
๐ Read
via "National Vulnerability Database".
A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.๐ Read
via "National Vulnerability Database".
โโโ ๏ธ ======================= โ ๏ธ
๐ LOOK! It's amazingโผ๏ธ
โ ๏ธ ======================= โ ๏ธ
๐ LOOK! It's amazingโผ๏ธ
โ ๏ธ ======================= โ ๏ธ
โผ CVE-2020-12911 โผ
๐ Read
via "National Vulnerability Database".
A denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially crafted D3DKMTCreateAllocation API request can cause an out-of-bounds read and denial of service (BSOD). This vulnerability can be triggered from a non-privileged account.๐ Read
via "National Vulnerability Database".
โ Windows โPing of Deathโ bug revealed โ patch now! โ
๐ Read
via "Naked Security".
No one has figured out how to run code with this bug yet - but if they do, you can bet that someone will turn it into a computer worm.๐ Read
via "Naked Security".
Naked Security
Windows โPing of Deathโ bug revealed โ patch now!
No one has figured out how to run code with this bug yet โ but if they do, you can bet that someone will turn it into a computer worm.
โผ CVE-2020-7330 โผ
๐ Read
via "National Vulnerability Database".
Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious software to execute with elevated privileges via editing of environment variables๐ Read
via "National Vulnerability Database".
โ Cybercriminals Steal Nearly 1TB of Data from Miami-Based International Tech Firm โ
๐ Read
via "Threat Post".
Databases of sensitive, financial and personally identifiable info and documents from Intcomex were leaked on Russian-language hacker forum after a ransomware attack.๐ Read
via "Threat Post".
Threat Post
Cybercriminals Steal Nearly 1TB of Data from Miami-Based International Tech Firm
Databases of sensitive, financial and personally identifiable info and documents from Intcomex were leaked on Russian-language hacker forum after a ransomware attack.
โ Google, Intel Warn on โZero-Clickโ Kernel Bug in Linux-Based IoT Devices โ
๐ Read
via "Threat Post".
Intel and Google are urging users to update the Linux kernel to version 5.9 or later.๐ Read
via "Threat Post".
Threat Post
Google, Intel Warn on โZero-Clickโ Kernel Bug in Linux-Based IoT Devices
Intel and Google are urging users to update the Linux kernel to version 5.9 or later.
๐ด NIST Quantum Cryptography Program Nears Completion ๐ด
๐ Read
via "Dark Reading".
The National Institute of Standards and Technology's first post-quantum cryptography standard will address key issues, approaches, an arms race, and the technology's uncertain future.๐ Read
via "Dark Reading".
Dark Reading
NIST Quantum Cryptography Program Nears Completion
The National Institute of Standards and Technology's first post-quantum cryptography standard will address key issues, approaches, an arms race, and the technol
๐ฆฟ Survey finds that IT departments victimized by ransomware forever changed ๐ฆฟ
๐ Read
via "Tech Republic".
IT managers at organizations hit by ransomware are nearly three times as likely to feel "significantly behind" when it comes to understanding cyberthreats, compared to their peers that have never been hit.๐ Read
via "Tech Republic".
TechRepublic
Survey finds that IT departments victimized by ransomware forever changed
IT managers at organizations hit by ransomware are nearly three times as likely to feel "significantly behind" when it comes to understanding cyberthreats, compared to their peers that have never been hit.
โผ CVE-2020-6087 โผ
๐ Read
via "National Vulnerability Database".
An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability If the ANSI Extended Symbol Segment Sub-Type is supplied, the device treats the byte following as the Data Size in words. When this value represents a size greater than what remains in the packet data, the device enters a fault state where communication with the device is lost and a physical power cycle is required.๐ Read
via "National Vulnerability Database".
โผ CVE-2020-6083 โผ
๐ Read
via "National Vulnerability Database".
An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.๐ Read
via "National Vulnerability Database".
โ Intel Adds Memory Encryption, Firmware Security to Ice Lake Chips โ
๐ Read
via "Threat Post".
Intel's addition of memory encryption to its upcoming 3rd generation Xeon Scalable processors matches AMD's Secure Memory Encryption (SME) feature.๐ Read
via "Threat Post".
Threat Post
Intel Adds Memory Encryption, Firmware Security to Ice Lake Chips
Intel's addition of memory encryption to its upcoming 3rd generation Xeon Scalable processors matches AMD's Secure Memory Encryption (SME) feature.
โผ CVE-2020-0415 โผ
๐ Read
via "National Vulnerability Database".
In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.0 Android-8.1Android ID: A-156020795๐ Read
via "National Vulnerability Database".
โผ CVE-2020-0414 โผ
๐ Read
via "National Vulnerability Database".
In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-157708122๐ Read
via "National Vulnerability Database".