❌ Two Chrome Browser Updates Plugs Holes Actively Targeted by Exploits ❌
📖 Read
via "Threat Post".
Patches for both the Chrome desktop and Android browser address high-severity flaws with known exploits available in the wild.📖 Read
via "Threat Post".
Threat Post
Two Chrome Browser Updates Plug Holes Actively Targeted by Exploits
Patches for both the Chrome desktop and Android browser address high-severity flaws with known exploits available in the wild.
🔏 What is SOC 2? 🔏
📖 Read
via "Digital Guardian".
SOC 2 is a set of compliance requirements for companies that use cloud-based storage of customer data. Learn about the basics of SOC 2 and best practices in this week's Data Protection 101!📖 Read
via "Digital Guardian".
🕴 Oracle Issues Out-of-Band Update for Remote-Access Vulnerability 🕴
📖 Read
via "Dark Reading".
The exploit could give an attacker complete control of vulnerable WebLogic servers.📖 Read
via "Dark Reading".
Dark Reading
Oracle Issues Out-of-Band Update for Remote-Access Vulnerability
The exploit could give an attacker complete control of vulnerable WebLogic servers.
❌ 34M Records from 17 Companies Up for Sale in Cybercrime Forum ❌
📖 Read
via "Threat Post".
A diverse set of companies, including an adaptive-learning platform in Brazil, an online grocery service in Singapore and a cold-brew coffee-maker company, are caught up in the large data trove.📖 Read
via "Threat Post".
Threat Post
34M Records from 17 Companies Up for Sale in Cybercrime Forum
A diverse set of companies, including an adaptive-learning platform in Brazil, an online grocery service in Singapore and a cold-brew coffee-maker company, are caught up in the large data trove.
🕴 Neustar Agrees to Buy Verisign's Public DNS Service 🕴
📖 Read
via "Dark Reading".
The address space for Verisign Public DNS will be incorporated into Neustar's UltraDNS Public service following the acquisition.📖 Read
via "Dark Reading".
Dark Reading
Neustar Agrees to Buy Verisign's Public DNS Service
The address space for Verisign Public DNS will be incorporated into Neustar's UltraDNS Public service following the acquisition.
❌ APT Groups Finding Success with Mix of Old and New Tools ❌
📖 Read
via "Threat Post".
The APT threat landscape is a mixed bag of tried-and-true tactics and cutting-edge techniques, largely supercharged by geo-politics, a report finds.📖 Read
via "Threat Post".
Threat Post
APT Groups Finding Success with Mix of Old and New Tools
The APT threat landscape is a mixed bag of tried-and-true tactics and cutting-edge techniques, largely supercharged by geo-politics, a report finds.
🦿 How to use the limited photos picker in iOS 14 for added privacy 🦿
📖 Read
via "Tech Republic".
Ensure apps can only access the photos and albums that you designate by using the new limited photos picker in iOS 14.📖 Read
via "Tech Republic".
TechRepublic
How to use the limited photos picker in iOS 14 for added privacy
Ensure apps can only access the photos and albums that you designate by using the new limited photos picker in iOS 14.
‼ CVE-2020-1908 ‼
📖 Read
via "National Vulnerability Database".
Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-1909 ‼
📖 Read
via "National Vulnerability Database".
A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory corruption, crashes and potentially code execution. This could have happened only if several events occurred together in sequence, including receiving an animated sticker while placing a WhatsApp video call on hold.📖 Read
via "National Vulnerability Database".
❌ Oracle Solaris Zero-Day Attack Revealed ❌
📖 Read
via "Threat Post".
A threat actor is compromising telecommunications companies and targeted financial and professional consulting industries using an Oracle flaw.📖 Read
via "Threat Post".
Threat Post
Oracle Solaris Zero-Day Attack Revealed
A threat actor is compromising telecommunications companies and targeted financial and professional consulting industries using an Oracle flaw.
🦿 WinZip Mac 8 Pro: Create backups and encrypt sensitive files 🦿
📖 Read
via "Tech Republic".
Mac users can do more than just compress files using WinZip Mac 8 Pro. The program also assists with creating backups and encrypting sensitive files, among other features.📖 Read
via "Tech Republic".
TechRepublic
WinZip Mac 8 Pro: Create backups and encrypt sensitive files
Mac users can do more than just compress files using WinZip Mac 8 Pro. The program also assists with creating backups and encrypting sensitive files, among other features.
🕴 APT Groups Get Innovative -- and More Dangerous -- in 3Q 🕴
📖 Read
via "Dark Reading".
In "curious" trend, more threat actors diversified their tool sets in third quarter than usual.📖 Read
via "Dark Reading".
Dark Reading
APT Groups Get Innovative -- and More Dangerous -- in 3Q
In curious trend, more threat actors diversified their tool sets in third quarter than usual.
‼ CVE-2020-26211 ‼
📖 Read
via "National Vulnerability Database".
In BookStack before version 0.30.4, a user with permissions to edit a page could insert JavaScript code through the use of `javascript:` URIs within a link or form which would run, within the context of the current page, when clicked or submitted. Additionally, a user with permissions to edit a page could insert a particular meta tag which could be used to silently redirect users to a alternative location upon visit of a page. Dangerous content may remain in the database but will be removed before being displayed on a page. If you think this could have been exploited the linked advisory provides a SQL query to test. As a workaround without upgrading, page edit permissions could be limited to only those that are trusted until you can upgrade although this will not address existing exploitation of this vulnerability. The issue is fixed in BookStack version 0.30.4.📖 Read
via "National Vulnerability Database".
🕴 Securing the 2020 Election: 'We're Not Out of the Woods Yet' 🕴
📖 Read
via "Dark Reading".
Election Day brought instances of misinformation, robocalls, and technical glitches, but officials are more worried about coming days and weeks.📖 Read
via "Dark Reading".
Dark Reading
Securing the 2020 Election: 'We're Not Out of the Woods Yet'
Election Day brought instances of misinformation, robocalls, and technical glitches, but officials are more worried about coming days and weeks.
‼ CVE-2020-27346 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.📖 Read
via "National Vulnerability Database".
❌ Police to Livestream Ring Camera Footage of Mississippi Residents ❌
📖 Read
via "Threat Post".
Pilot program again sparks privacy fears from ACLU as Amazon takes its partnership with law enforcement to the next level.📖 Read
via "Threat Post".
Threat Post
Police to Livestream Ring Camera Footage of Mississippi Residents
A Mississippi pilot program that allows police to livestream private camera footage sparks privacy fears from the ACLU.
⚠ Another Chrome zero-day, this time on Android – check your version! ⚠
📖 Read
via "Naked Security".
Another week, another Chrome zero-day, this time on your phone.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
❌ Code42 Incydr Series: Why Most Companies Can’t Stop Departing Employee Data Theft ❌
📖 Read
via "Threat Post".
According to Code42’s Data Exposure Report, 63% of employees say they brought data with them from their previous employer to their current employer.📖 Read
via "Threat Post".
Threat Post
Code42 Incydr Series: Why Most Companies Can’t Stop Departing Employee Data Theft
According to Code42’s Data Exposure Report, 63% of employees say they brought data with them from their previous employer to their current employer.
🕴 CSA Moves to Redefine Cloud-Based Intelligence 🕴
📖 Read
via "Dark Reading".
The new paradigm seeks to understand, integrate, and automate data workflows, and better yet, doesn't require significant investment or more personnel.📖 Read
via "Dark Reading".
Dark Reading
CSA Moves to Redefine Cloud-Based Intelligence
The new paradigm seeks to understand, integrate, and automate data workflows, and better yet, doesn't require significant investment or more personnel.
🛠 Sifter 10.6m 🛠
📖 Read
via "Packet Storm Security".
Sifter is a osint, recon, and vulnerability scanner. It combines a plethora of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the blue vulnerabilities within Microsoft systems and if unpatched, exploits them.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Sifter 10.6m ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ VMware Issues Updated Fix For Critical ESXi Flaw ❌
📖 Read
via "Threat Post".
A previous fix for the critical remote code execution bug was "incomplete," according to VMware.📖 Read
via "Threat Post".
Threat Post
VMware Issues Updated Fix For Critical ESXi Flaw
A previous fix for the critical remote code execution bug was "incomplete," according to VMware.