🛡 Cybersecurity & Privacy 🛡 - News
25.9K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🔐 Microsoft launches Azure DevOps bug bounty program, $20,000 rewards on offer 🔐

The Redmond giant is keenly interested in remote code execution and privilege escalation flaws.

📖 Read

via "Security on TechRepublic".
🕴 Black Hat Europe 🕴



📖 Read

via "Dark Reading: ".
🕴 8 Tips for Monitoring Cloud Security 🕴

Cloud security experts weigh in with the practices and tools they prefer to monitor and measure security metrics in the cloud.

📖 Read

via "Dark Reading: ".
🔐 5 blockchain trends to expect in 2019 🔐

Blockchain may finally be ready to move from hype to reality, with continued IoT integrations and tokenization, according to KPMG.

📖 Read

via "Security on TechRepublic".
Twitter Android Glitch Exposed Private Tweets for Years

Twitter has fixed the issue, which has been ongoing since 2014.

📖 Read

via "Threatpost | The first stop for security news".
🕴 The Rx for HIPAA Compliance in the Cloud 🕴

For medical entities, simply following HIPAA cloud service provider guidelines is no longer enough to ensure that your practice is protected from cyber threats, government investigations, and fines.

📖 Read

via "Dark Reading: ".
🕴 PCI Council Releases New Software Framework for DevOps Era 🕴

The PCI Software Security Framework will eventually replace PCI DA-DSS when it expires in 2022.

📖 Read

via "Dark Reading: ".
🔐 Bug bounty programs: Everything you thought you knew is wrong 🔐

One common criticism of bug bounty programs is that very few hackers actually make money. Not only is this untrue, but it misses the point.

📖 Read

via "Security on TechRepublic".
Critical, Unpatched Cisco Flaw Leaves Small Business Networks Wide Open

A default configuration allows full admin access to unauthenticated attackers.

📖 Read

via "Threatpost | The first stop for security news".
Threatpost News Wrap Podcast For Jan. 18

Threatpost editors break down the top headlines from the week ended Jan. 18.

📖 Read

via "Threatpost | The first stop for security news".
🕴 GDPR Suit Filed Against Amazon, Apple 🕴

An Austrian non-profit, led by privacy activist and attorney Max Schrems, has filed suit against 8 tech giants for non-compliance with the EU General Data Protection Regulation.

📖 Read

via "Dark Reading: ".
Fallout EK Retools for a Fresh New 2019 Look

The Fallout EK has added the latest Flash vulnerability to its bad of tricks, among other tune-ups.

📖 Read

via "Threatpost | The first stop for security news".
Google Play Removes Malicious Malware-Ridden Apps

Two apps on Google Play were infecting devices with the Anubis mobile banking trojan.

📖 Read

via "Threatpost | The first stop for security news".
🕴 VC Investments in Cybersecurity Hit Record Highs in 2018 🕴

But rate of funding appears unsustainable, according to Strategic Cyber Ventures.

📖 Read

via "Dark Reading: ".
🕴 2018's Most Common Vulnerabilities Include Issues New and Old 🕴

The most common vulnerabilities seen last year run the gamut from cross-site scripting to issues with CMS platforms.

📖 Read

via "Dark Reading: ".
Serious Security: What 2000 years of cryptography can teach us

Here's a fascinating history of cryptography that has plenty to teach you - and you don't need a degree in mathematics to follow along!

📖 Read

via "Naked Security".
ATENTION New - CVE-2017-18332

Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18331

Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2017-18160

AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850

📖 Read

via "National Vulnerability Database".