🕴 Container Deployments Bring Security Woes at DevOps Speed 🕴
📖 Read
via "Dark Reading: ".
Nearly half of all companies know that they're deploying containers with security flaws, according to a new survey.📖 Read
via "Dark Reading: ".
Dark Reading
Container Deployments Bring Security Woes at DevOps Speed
Nearly half of all companies know that they're deploying containers with security flaws, according to a new survey.
🕴 Web Vulnerabilities Up, IoT Flaws Down 🕴
📖 Read
via "Dark Reading: ".
The number of flaws found in WordPress and its associated plugins have tripled since 2017, while Internet of Things vulnerabilities dropped significantly, according to data collected by Imperva.📖 Read
via "Dark Reading: ".
Dark Reading
Web Vulnerabilities Up, IoT Flaws Down
The number of flaws found in WordPress and its associated plugins have tripled since 2017, while Internet of Things vulnerabilities dropped significantly, according to data collected by Imperva.
ATENTION‼ New - CVE-2018-0282
📖 Read
via "National Vulnerability Database".
A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state. While this vulnerability potentially affects all TCP applications, the only affected application observed so far is the HTTP server. An attacker could exploit this vulnerability by sending specific HTTP requests at a sustained rate to a reachable IP address of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition on an affected device.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-0181
📖 Read
via "National Vulnerability Database".
A vulnerability in the Redis implementation used by the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software could allow an unauthenticated, remote attacker to modify key-value pairs for short-lived events stored by the Redis server. The vulnerability is due to improper authentication when accessing the Redis server. An unauthenticated attacker could exploit this vulnerability by modifying key-value pairs stored within the Redis server database. An exploit could allow the attacker to reduce the efficiency of the Cisco Policy Suite for Mobile and Cisco Policy Suite Diameter Routing Agent software.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10736
📖 Read
via "National Vulnerability Database".
The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS via the wp-admin/admin.php?page=dpsp-toolkit dpsp_message_class parameter.📖 Read
via "National Vulnerability Database".
⚠ Supreme Court refuses to hear Fiat Chrysler appeal in Jeep hacking case ⚠
📖 Read
via "Naked Security".
The court's action means that one of the first legal cases involving cyber security risks in cars will go to trial in October.📖 Read
via "Naked Security".
Naked Security
Supreme Court refuses to hear Fiat Chrysler appeal in Jeep hacking case
The court’s action means that one of the first legal cases involving cyber security risks in cars will go to trial in October.
⚠ Update now! Microsoft and Adobe’s January 2019 Patch Tuesday is here ⚠
📖 Read
via "Naked Security".
After a busy sequence of updates in October, November, and December, the new year’s first Patch Tuesday promises a lighter workload.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 6 Best Practices for Managing an Online Educational Infrastructure 🕴
📖 Read
via "Dark Reading: ".
Universities must keep pace with rapidly changing technology to help thwart malicious hacking attempts and protect student information.📖 Read
via "Dark Reading: ".
Darkreading
6 Best Practices for Managing an Online Educational Infrastructure
Universities must keep pace with rapidly changing technology to help thwart malicious hacking attempts and protect student information.
❌ Google Search Results Spoofed to Create Fake News ❌
📖 Read
via "Threatpost | The first stop for security news".
The technique can be used to spread disinformation while leveraging the trust people have in Google's search results.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Google Search Results Spoofed to Create Fake News
The technique can be used to spread disinformation while leveraging the trust people have in Google's search results.
❌ ‘Unprecedented’ DNS Hijacking Attacks Linked to Iran ❌
📖 Read
via "Threatpost | The first stop for security news".
The attacks, targeting several countries to redirect traffic and harvest credentials, have been linked to Iran.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
‘Unprecedented’ DNS Hijacking Attacks Linked to Iran
The attacks, targeting several countries redirect traffic and harvest credentials, have been linked to Iran.
🕴 Google: G Suite Now Alerts Admins to Data Exfiltration 🕴
📖 Read
via "Dark Reading: ".
New additions to the G Suite alert center are intended to notify admins of phishing and data exports.📖 Read
via "Dark Reading: ".
Darkreading
Google: G Suite Now Alerts Admins to Data Exfiltration
New additions to the G Suite alert center are intended to notify admins of phishing and data exports.
🕴 Consumers Demand Security from Smart Device Makers 🕴
📖 Read
via "Dark Reading: ".
Poll shows individuals want better security from IoT device manufacturers as connected products flood the market.📖 Read
via "Dark Reading: ".
Dark Reading
Consumers Demand Security from Smart Device Makers
Poll shows individuals want better security from IoT device manufacturers as connected products flood the market.
🔐 CES 2019: How Winston can protect consumers and smart offices from identity thieves 🔐
📖 Read
via "Security on TechRepublic".
Winston is an online privacy device that sits between a modem and router to protect the user's online browsing and identity.📖 Read
via "Security on TechRepublic".
TechRepublic
CES 2019: How Winston can protect consumers and smart offices from identity thieves
Winston is an online privacy device that sits between a modem and router to protect the user's online browsing and identity.
🕴 Ryuk Ransomware Attribution May Be Premature 🕴
📖 Read
via "Dark Reading: ".
The eagerness to tie recent Ryuk ransomware attacks to a specific group could be rushed, researchers say.📖 Read
via "Dark Reading: ".
Darkreading
Ryuk Ransomware Attribution May Be Premature
The eagerness to tie recent Ryuk ransomware attacks to a specific group could be rushed, researchers say.
🕴 Election Security Isn't as Bad as People Think 🕴
📖 Read
via "Dark Reading: ".
Make no mistake, however: We'll always have to be on guard. And we can take some lessons from the world of industrial cybersecurity.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
⚠ Facebook violated tough new cybersecurity law, says Vietnam ⚠
📖 Read
via "Naked Security".
The law brought sweeping new powers, allowing authorities to force technology companies to hand over user data and to censor posts.📖 Read
via "Naked Security".
Naked Security
Facebook violated tough new cybersecurity law, says Vietnam
The law brought sweeping new powers, allowing authorities to force technology companies to hand over user data and to censor posts.
⚠ You can’t delete Facebook from some Androids and people aren’t happy ⚠
📖 Read
via "Naked Security".
The #DeleteFacebook movement may be growing, but many Samsung users are having a tough time scraping the social network’s preinstalled software from their phones.📖 Read
via "Naked Security".
Naked Security
You can’t delete Facebook from some Androids and people aren’t happy
The #DeleteFacebook movement may be growing, but many Samsung users are having a tough time scraping the social network’s preinstalled software from their phones.
🕴 Reddit Alerts Users to Possible Account Breaches 🕴
📖 Read
via "Dark Reading: ".
User lockouts, combined with requirements for new passwords, indicate an attack on accounts at the popular social media platform.📖 Read
via "Dark Reading: ".
Darkreading
Reddit Alerts Users to Possible Account Breaches
User lockouts, combined with requirements for new passwords, indicate an attack on accounts at the popular social media platform.
❌ At CES, Focus is On ‘Cool Factor’ Not IoT Security ❌
📖 Read
via "Threatpost | The first stop for security news".
When it comes to IoT, the priority at CES is the "wow factor" - but not so much a focus on security.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
At CES, Focus is On ‘Cool Factor’ Not IoT Security
When it comes to IoT, the priority at CES is the "wow factor" - but not so much a focus on security.
🕴 DNS Hijacking Campaign Targets Organizations Globally 🕴
📖 Read
via "Dark Reading: ".
A group believed to be operating out of Iran has manipulated DNS records belonging to dozens of firms in an apparent cyber espionage campaign, FireEye says.📖 Read
via "Dark Reading: ".
Darkreading
DNS Hijacking Campaign Targets Organizations Globally
A group believed to be operating out of Iran has manipulated DNS records belonging to dozens of firms in an apparent cyber espionage campaign, FireEye says.
🕴 New Software Side-Channel Attack Raises Risk for Captured Crypto 🕴
📖 Read
via "Dark Reading: ".
The new attack hits operating systems, not chips, and may give criminals the keys to a company's cryptography.📖 Read
via "Dark Reading: ".
Dark Reading
New Software Side-Channel Attack Raises Risk for Captured Crypto
The new attack hits operating systems, not chips, and may give criminals the keys to a company's cryptography.