🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕴 FireEye Breach Fallout Yet to Be Felt 🕴

Aftermath of the FireEye breach by Russia's foreign service agency raises concerns over what the attackers could do next - and how to defend against it.

📖 Read

via "Dark Reading".
Defending the Intelligent Edge from Evolving Attacks

Fortinet's Aamir Lakhani discusses best practices for securing company data against next-gen threats, like edge access trojans (EATs).

📖 Read

via "Threat Post".
🦿 Cyberconflict: How it can reach beyond government systems, and how to protect your business 🦿

Cyberconflict is an unfortunate growing trend impacting businesses and governments. Learn the risks and possible solutions from an industry expert.

📖 Read

via "Tech Republic".
🕴 'Fingerprint-Jacking' Attack Technique Manipulates Android UI 🕴

Researchers explore fingerprint-jacking, a user interface-based attack that targets fingerprints scanned into Android apps.

📖 Read

via "Dark Reading".
🕴 Contact-Tracing Apps Still Expose Users to Security, Privacy Issues 🕴

Of nearly 100 apps tested, 40% have significant security issues, using either GPS locations or bespoke Bluetooth proximity detection to determine exposure.

📖 Read

via "Dark Reading".
🕴 Juvenile Pleads Guilty to 2016 DNS Attack 🕴

Mirai botnet was used to target Sony in an attack that took down DynDNS and a number of its notable customers.

📖 Read

via "Dark Reading".
CVE-2020-26271

In affected versions of TensorFlow under certain cases, loading a saved model can result in accessing uninitialized memory while building the computation graph. The MakeEdge function creates an edge between one output tensor of the src node (given by output_index) and the input slot of the dst node (given by input_index). This is only possible if the types of the tensors on both sides coincide, so the function begins by obtaining the corresponding DataType values and comparing these for equality. However, there is no check that the indices point to inside of the arrays they index into. Thus, this can result in accessing data out of bounds of the corresponding heap allocated arrays. In most scenarios, this can manifest as unitialized data access, but if the index points far away from the boundaries of the arrays this can be used to leak addresses from the library. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.

📖 Read

via "National Vulnerability Database".
🕴 Knowing What the Enemy Knows Is Key to Proper Defense 🕴

Think like an attacker if you want to understand your attack surface, says security researcher at Black Hat Europe.

📖 Read

via "Dark Reading".
🦿 Privacy risks persist with DIY COVID-19 contact tracing apps 🦿

Do-it-yourself apps that don't use the official API from Apple and Google raised privacy concerns due to unsecure design, says Guardsquare.

📖 Read

via "Tech Republic".
🕴 51% of Edge Readers Plan to Pursue New Cybersecurity Certification in 2021 🕴

Demands of the "new normal" won't stop the majority of poll-takers from mastering new skills.

📖 Read

via "Dark Reading".
MoleRats APT Returns with Espionage Play Using Facebook, Dropbox

The threat group is increasing its espionage activity in light of the current political climate and recent events in the Middle East, with two new backdoors.

📖 Read

via "Threat Post".
🦿 4 security bugs discovered in games on Valve's Steam platform 🦿

The vulnerabilities in Counter Strike: Global Defensive, Dota2, and Half Life could have allowed hackers to crash the games and hijack computers, according to Check Point.

📖 Read

via "Tech Republic".
🦿 How to install fail2ban on Fedora 33 for protection against unwanted logins 🦿

Jack Wallen shows you how to install and configure fail2ban on the latest release of Fedora Linux.

📖 Read

via "Tech Republic".
🦿 How phishing attacks continue to exploit COVID-19 🦿

These phishing emails promise compensation, test results, and other lures about the coronavirus to trick unsuspecting users, says Armorblox.

📖 Read

via "Tech Republic".
🦿 Machine learning: A cheat sheet 🦿

From Apple to Google to Toyota, companies across the world are pouring resources into developing AI systems with machine learning. This comprehensive guide explains what machine learning really means.

📖 Read

via "Tech Republic".
🕴 Cloud Identity and Access Management: Understanding the Chain of Access 🕴

Here's where enterprises encounter challenges with cloud IAM and the best practices they should follow to correct these mistakes.

📖 Read

via "Dark Reading".
🔏 What is Data Security? 🔏

Learn about data security and the role it plays in many data protection solutions in Data Protection 101, our series on the fundamentals of data security.

📖 Read

via "Digital Guardian".
Pfizer COVID-19 Vaccine Targeted in EU Cyberattack

Threat actors accessed Pfizer vaccine documentation submitted to EU regulators in the latest cyberattack trying to profit off pandemic suffering.  

📖 Read

via "Threat Post".
🦿 Beware of "fleeceware" in Android apps 🦿

Some apps in the Google Play Store are impersonating legitimate apps and stealing users' money.

📖 Read

via "Tech Republic".
🦿 Watch out for holiday phishing scams 🦿

Security company GreatHorn shared some of the latest ways cybercriminals are trying to take your money. Here's how to avoid them.

📖 Read

via "Tech Republic".
🕴 FireEye Breach Fallout Yet to Be Felt 🕴

Aftermath of the FireEye breach by Russia's foreign service agency raises concerns over what the attackers could do next - and how to defend against it.

📖 Read

via "Dark Reading".