‼ CVE-2020-13893 ‼
📖 Read
via "National Vulnerability Database".
Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to inject arbitrary web script or HTML via multiple parameters through Unicode Transformations (Best-fit Mapping), as demonstrated by the full-width variants of the less-than sign (%EF%BC%9C) and greater-than sign (%EF%BC%9E).📖 Read
via "National Vulnerability Database".
❌ Microsoft: Most-Imitated Brand for Phishing Emails ❌
📖 Read
via "Threat Post".
The shift to remote working spurred Microsoft and Amazon to the top of the heap for cybercriminals to use as lures in the third quarter.📖 Read
via "Threat Post".
Threat Post
Microsoft is the Most-Imitated Brand for Phishing Emails
The shift to remote working spurred Microsoft and Amazon to the top of the heap for cybercriminals to use as lures in the third quarter.
⚠ Naked Security Live – Ping of Death: are you at risk? ⚠
📖 Read
via "Naked Security".
Here's the latest Naked Security Live video - enjoy (and please share with your friends)!📖 Read
via "Naked Security".
Naked Security
Naked Security Live – Ping of Death: are you at risk?
Here’s the latest Naked Security Live video – enjoy (and please share with your friends)!
‼ CVE-2020-7745 ‼
📖 Read
via "National Vulnerability Database".
This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functionality that acts as a backdoor. Mintegral and their partners (advertisers) can remotely execute arbitrary code on a user device.📖 Read
via "National Vulnerability Database".
🕴 A New Risk Vector: The Enterprise of Things 🕴
📖 Read
via "Dark Reading".
Billions of devices -- including security cameras, smart TVs, and manufacturing equipment -- are largely unmanaged and increase an organization's risk.📖 Read
via "Dark Reading".
Dark Reading
A New Risk Vector: The Enterprise of Things
Billions of devices -- including security cameras, smart TVs, and manufacturing equipment -- are largely unmanaged and increase an organization's risk.
❌ Hackers Claim Source Code Theft for Watch Dogs: Legion, Albion ❌
📖 Read
via "Threat Post".
In both cases, cybercriminals claim to have reams of information for the popular gaming titles.📖 Read
via "Threat Post".
Threat Post
Game Titles Watch Dogs: Legion, Albion Both Targeted by Hackers
In both cases, cybercriminals claim to have reams of information for the popular gaming titles.
‼ CVE-2020-15909 ‼
📖 Read
via "National Vulnerability Database".
SolarWinds N-central through 2020.1 allows session hijacking.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-15910 ‼
📖 Read
via "National Vulnerability Database".
SolarWinds N-central through 12.3 does not include the HTTPOnly flag in the Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-13778 ‼
📖 Read
via "National Vulnerability Database".
rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php.📖 Read
via "National Vulnerability Database".
🦿 Microsoft now the most impersonated brand in phishing attacks 🦿
📖 Read
via "Tech Republic".
Almost 20% of phishing campaigns last quarter spoofed Microsoft as many people continue to work remotely due to the coronavirus pandemic, says Check Point Research.📖 Read
via "Tech Republic".
🕴 Expert Tips to Keep WordPress Safe 🕴
📖 Read
via "Dark Reading".
The most widely used content management system on the Web relies heavily on plug-ins and add-on software, rigorous security measures at every level.📖 Read
via "Dark Reading".
Dark Reading
Expert Tips to Keep WordPress Safe
The most widely used content management system on the Web relies heavily on plug-ins and add-on software -- and that requires rigorous security measures at every level.
❌ Microsoft Exchange, Outlook Under Siege By APTs ❌
📖 Read
via "Threat Post".
A new threat report shows that APTs are switching up their tactics when exploiting Microsoft services like Exchange and OWA, in order to avoid detection.📖 Read
via "Threat Post".
Threat Post
Microsoft Exchange, Outlook Under Siege By APTs
A new threat report shows that APTs are switching up their tactics when exploiting Microsoft services like Exchange and OWA, in order to avoid detection.
🕴 A Swift Reminder About Cybersecurity 🕴
📖 Read
via "Dark Reading".
The hackers gonna crack, crack, crack, crack, crack ...📖 Read
via "Dark Reading".
Dark Reading
A Swift Reminder About Cybersecurity
The hackers gonna crack, crack, crack, crack, crack ...
‼ CVE-2020-24265 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon() that can make tcpprep crash and cause a denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-24266 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that can make tcpprep crash and cause a denial of service.📖 Read
via "National Vulnerability Database".
🕴 Chart: The Pandemic Reprioritizes Security Projects 🕴
📖 Read
via "Dark Reading".
Responses among IT and security pros reflect concern over vulnerabilities incurred by workers accessing the enterprise network from poorly protected home networks.📖 Read
via "Dark Reading".
❌ Ryuk Ransomware Gang Uses Zerologon Bug for Lightning-Fast Attack ❌
📖 Read
via "Threat Post".
Researchers said the group was able to move from initial phish to full domain-wide encryption in just five hours.📖 Read
via "Threat Post".
Threat Post
Ryuk Ransomware Gang Uses Zerologon Bug for Lightning-Fast Attack
Researchers said the group was able to move from initial phish to full domain-wide encryption in just five hours.
🕴 7 Tips for Choosing Security Metrics That Matter 🕴
📖 Read
via "Dark Reading".
Experts weigh in on picking metrics that demonstrate how the security team is handling operational efficiency and reducing risk.📖 Read
via "Dark Reading".
Dark Reading
7 Tips for Choosing Security Metrics That Matter
Experts weigh in on picking metrics that demonstrate how the security team is handling operational efficiency and reducing risk.
❌ Overlay Malware Targets Windows Users with a DLL Hijack Twist ❌
📖 Read
via "Threat Post".
Brazilians are warned of a new Vizom malware masquerading as video conferencing and browser software.📖 Read
via "Threat Post".
Threat Post
Overlay Malware Targets Windows Users with a DLL Hijack Twist
Brazilians are warned of a new Vizom malware masquerading as video conferencing and browser software.
❌ GravityRAT Comes Back to Earth with Android, macOS Spyware ❌
📖 Read
via "Threat Post".
The espionage tool masquerades as legitimate applications and robs victims blind of their data.📖 Read
via "Threat Post".
Threat Post
GravityRAT Comes Back to Earth with Android, macOS Spyware
The espionage tool masquerades as legitimate applications and robs victims blind of their data.
🕴 Trickbot, Phishing, Ransomware & Elections 🕴
📖 Read
via "Dark Reading".
The botnet has taken some hits lately, but that doesn't mean the threat is over. Here are some steps you can take to keep it from your door.📖 Read
via "Dark Reading".
Dark Reading
Trickbot, Phishing, Ransomware & Elections
The botnet has taken some hits lately, but that doesn't mean the threat is over. Here are some steps you can take to keep it from your door.