πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
❌ Twitter Android Glitch Exposed Private Tweets for Years ❌

Twitter has fixed the issue, which has been ongoing since 2014.

πŸ“– Read

via "Threatpost | The first stop for security news".
πŸ•΄ The Rx for HIPAA Compliance in the Cloud πŸ•΄

For medical entities, simply following HIPAA cloud service provider guidelines is no longer enough to ensure that your practice is protected from cyber threats, government investigations, and fines.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ PCI Council Releases New Software Framework for DevOps Era πŸ•΄

The PCI Software Security Framework will eventually replace PCI DA-DSS when it expires in 2022.

πŸ“– Read

via "Dark Reading: ".
πŸ” Bug bounty programs: Everything you thought you knew is wrong πŸ”

One common criticism of bug bounty programs is that very few hackers actually make money. Not only is this untrue, but it misses the point.

πŸ“– Read

via "Security on TechRepublic".
❌ Critical, Unpatched Cisco Flaw Leaves Small Business Networks Wide Open ❌

A default configuration allows full admin access to unauthenticated attackers.

πŸ“– Read

via "Threatpost | The first stop for security news".
❌ Threatpost News Wrap Podcast For Jan. 18 ❌

Threatpost editors break down the top headlines from the week ended Jan. 18.

πŸ“– Read

via "Threatpost | The first stop for security news".
πŸ•΄ GDPR Suit Filed Against Amazon, Apple πŸ•΄

An Austrian non-profit, led by privacy activist and attorney Max Schrems, has filed suit against 8 tech giants for non-compliance with the EU General Data Protection Regulation.

πŸ“– Read

via "Dark Reading: ".
❌ Fallout EK Retools for a Fresh New 2019 Look ❌

The Fallout EK has added the latest Flash vulnerability to its bad of tricks, among other tune-ups.

πŸ“– Read

via "Threatpost | The first stop for security news".
❌ Google Play Removes Malicious Malware-Ridden Apps ❌

Two apps on Google Play were infecting devices with the Anubis mobile banking trojan.

πŸ“– Read

via "Threatpost | The first stop for security news".
πŸ•΄ VC Investments in Cybersecurity Hit Record Highs in 2018 πŸ•΄

But rate of funding appears unsustainable, according to Strategic Cyber Ventures.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ 2018's Most Common Vulnerabilities Include Issues New and Old πŸ•΄

The most common vulnerabilities seen last year run the gamut from cross-site scripting to issues with CMS platforms.

πŸ“– Read

via "Dark Reading: ".
⚠ Serious Security: What 2000 years of cryptography can teach us ⚠

Here's a fascinating history of cryptography that has plenty to teach you - and you don't need a degree in mathematics to follow along!

πŸ“– Read

via "Naked Security".
ATENTIONβ€Ό New - CVE-2017-18332

Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2017-18331

Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2017-18160

AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850

πŸ“– Read

via "National Vulnerability Database".
⚠ Monday review – the hot 23 stories of the week ⚠

From WhatsApps that aren't meant for you to the highly promising USB-C authentication, and everything in between. It's weekly roundup time.

πŸ“– Read

via "Naked Security".
⚠ Monday review – the hot 23 stories of the week ⚠

From WhatsApps that aren't meant for you to the highly promising USB-C authentication, and everything in between. It's weekly roundup time.

πŸ“– Read

via "Naked Security".
⚠ Monday review – the hot 23 stories of the week ⚠

From WhatsApps that aren't meant for you to the highly promising USB-C authentication, and everything in between. It's weekly roundup time.

πŸ“– Read

via "Naked Security".
⚠ Tim Cook demands a way for users to delete their personal data ⚠

The Apple CEO wants the FTC to set up a data-broker clearinghouse so people can see the data that companies have collected on them.

πŸ“– Read

via "Naked Security".
⚠ State agency exposes 3TB of data, including FBI info and remote logins ⚠

Oklahoma’s Department of Securities (ODS) exposed 3TB of files in plain text containing sensitive data on the public internet this month.

πŸ“– Read

via "Naked Security".
⚠ Attackers used a LinkedIn job ad and Skype call to breach bank’s defences ⚠

A Chilean Senator has taken to Twitter with alarming news – the company running the country’s ATM network suffered a serious cyberattack.

πŸ“– Read

via "Naked Security".