πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
26.1K subscribers
89.3K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
❌ Google Search Results Spoofed to Create Fake News ❌

The technique can be used to spread disinformation while leveraging the trust people have in Google's search results.

πŸ“– Read

via "Threatpost | The first stop for security news".
❌ β€˜Unprecedented’ DNS Hijacking Attacks Linked to Iran ❌

The attacks, targeting several countries to redirect traffic and harvest credentials, have been linked to Iran.

πŸ“– Read

via "Threatpost | The first stop for security news".
πŸ•΄ Google: G Suite Now Alerts Admins to Data Exfiltration πŸ•΄

New additions to the G Suite alert center are intended to notify admins of phishing and data exports.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Consumers Demand Security from Smart Device Makers πŸ•΄

Poll shows individuals want better security from IoT device manufacturers as connected products flood the market.

πŸ“– Read

via "Dark Reading: ".
πŸ” CES 2019: How Winston can protect consumers and smart offices from identity thieves πŸ”

Winston is an online privacy device that sits between a modem and router to protect the user's online browsing and identity.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Ryuk Ransomware Attribution May Be Premature πŸ•΄

The eagerness to tie recent Ryuk ransomware attacks to a specific group could be rushed, researchers say.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Election Security Isn't as Bad as People Think πŸ•΄

Make no mistake, however: We'll always have to be on guard. And we can take some lessons from the world of industrial cybersecurity.

πŸ“– Read

via "Dark Reading: ".
⚠ Facebook violated tough new cybersecurity law, says Vietnam ⚠

The law brought sweeping new powers, allowing authorities to force technology companies to hand over user data and to censor posts.

πŸ“– Read

via "Naked Security".
⚠ You can’t delete Facebook from some Androids and people aren’t happy ⚠

The #DeleteFacebook movement may be growing, but many Samsung users are having a tough time scraping the social network’s preinstalled software from their phones.

πŸ“– Read

via "Naked Security".
πŸ•΄ Reddit Alerts Users to Possible Account Breaches πŸ•΄

User lockouts, combined with requirements for new passwords, indicate an attack on accounts at the popular social media platform.

πŸ“– Read

via "Dark Reading: ".
❌ At CES, Focus is On β€˜Cool Factor’ Not IoT Security ❌

When it comes to IoT, the priority at CES is the "wow factor" - but not so much a focus on security.

πŸ“– Read

via "Threatpost | The first stop for security news".
πŸ•΄ DNS Hijacking Campaign Targets Organizations Globally πŸ•΄

A group believed to be operating out of Iran has manipulated DNS records belonging to dozens of firms in an apparent cyber espionage campaign, FireEye says.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ New Software Side-Channel Attack Raises Risk for Captured Crypto πŸ•΄

The new attack hits operating systems, not chips, and may give criminals the keys to a company's cryptography.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2017-1002157

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2017-1002152

Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.

πŸ“– Read

via "National Vulnerability Database".
⚠ El Chapo was brought down by a sysadmin ⚠

Christian Rodriguez says he set up secure VoIP communications for the cartel: a system whose encryption keys he wound up giving to the FBI.

πŸ“– Read

via "Naked Security".
⚠ Trading site DX.Exchange spills gobs of user data ⚠

A trader believes he could easily have obtained admin access to the site and potentially have stolen the funds of its 600,000 users.

πŸ“– Read

via "Naked Security".
⚠ 2FA codes can be phished by new pentest tool ⚠

A researcher has published a tool called Modlishka, capable of phishing 2FA codes sent by SMS or authentication apps.

πŸ“– Read

via "Naked Security".
πŸ” 3 basic things to know about your data, according to Xerox's CISO πŸ”

Dan Patterson interviews Xerox CISO Alissa Abdullah about protecting sensitive data from adversaries. They also discuss the recent Marriott hack, privacy, ransomware, machine learning, and IoT.

πŸ“– Read

via "Security on TechRepublic".
⚠ Old tweets reveal hidden secrets ⚠

Old Twitter posts could reveal more about you than you think, according to researchers, even if you didn’t explicitly mention it.

πŸ“– Read

via "Naked Security".
πŸ” 69% of enterprises moving business-critical applications to the cloud πŸ”

Security concerns top the list of challenges to cloud migration, according to a Cloud Security Alliance report.

πŸ“– Read

via "Security on TechRepublic".