🕴 2018's Most Common Vulnerabilities Include Issues New and Old 🕴
📖 Read
via "Dark Reading: ".
The most common vulnerabilities seen last year run the gamut from cross-site scripting to issues with CMS platforms.📖 Read
via "Dark Reading: ".
Dark Reading
2018's Most Common Vulnerabilities Include Issues New and Old
The most common vulnerabilities seen last year run the gamut from cross-site scripting to issues with CMS platforms.
⚠ Serious Security: What 2000 years of cryptography can teach us ⚠
📖 Read
via "Naked Security".
Here's a fascinating history of cryptography that has plenty to teach you - and you don't need a degree in mathematics to follow along!📖 Read
via "Naked Security".
ATENTION‼ New - CVE-2017-18332
📖 Read
via "National Vulnerability Database".
Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18331
📖 Read
via "National Vulnerability Database".
Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, SDA660📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18160
📖 Read
via "National Vulnerability Database".
AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850📖 Read
via "National Vulnerability Database".
⚠ Monday review – the hot 23 stories of the week ⚠
📖 Read
via "Naked Security".
From WhatsApps that aren't meant for you to the highly promising USB-C authentication, and everything in between. It's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 23 stories of the week
From WhatsApps that aren’t meant for you to the highly promising USB-C authentication, and everything in between. It’s weekly roundup time.
⚠ Monday review – the hot 23 stories of the week ⚠
📖 Read
via "Naked Security".
From WhatsApps that aren't meant for you to the highly promising USB-C authentication, and everything in between. It's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 23 stories of the week
From WhatsApps that aren’t meant for you to the highly promising USB-C authentication, and everything in between. It’s weekly roundup time.
⚠ Monday review – the hot 23 stories of the week ⚠
📖 Read
via "Naked Security".
From WhatsApps that aren't meant for you to the highly promising USB-C authentication, and everything in between. It's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 23 stories of the week
From WhatsApps that aren’t meant for you to the highly promising USB-C authentication, and everything in between. It’s weekly roundup time.
⚠ Tim Cook demands a way for users to delete their personal data ⚠
📖 Read
via "Naked Security".
The Apple CEO wants the FTC to set up a data-broker clearinghouse so people can see the data that companies have collected on them.📖 Read
via "Naked Security".
Naked Security
Tim Cook demands a way for users to delete their personal data
The Apple CEO wants the FTC to set up a data-broker clearinghouse so people can see the data that companies have collected on them.
⚠ State agency exposes 3TB of data, including FBI info and remote logins ⚠
📖 Read
via "Naked Security".
Oklahoma’s Department of Securities (ODS) exposed 3TB of files in plain text containing sensitive data on the public internet this month.📖 Read
via "Naked Security".
Naked Security
State agency exposes 3TB of data, including FBI info and remote logins
Oklahoma’s Department of Securities (ODS) exposed 3TB of files in plain text containing sensitive data on the public internet this month.
⚠ Attackers used a LinkedIn job ad and Skype call to breach bank’s defences ⚠
📖 Read
via "Naked Security".
A Chilean Senator has taken to Twitter with alarming news – the company running the country’s ATM network suffered a serious cyberattack.📖 Read
via "Naked Security".
Naked Security
Attackers used a LinkedIn job ad and Skype call to breach bank’s defences
A Chilean Senator has taken to Twitter with alarming news – the company running the country’s ATM network suffered a serious cyberattack.
⚠ Twitter bug exposed some Android private tweets to public view ⚠
📖 Read
via "Naked Security".
The latest privacy glitch, which went unnoticed for over four years, may trigger yet another EU privacy probe.📖 Read
via "Naked Security".
Naked Security
Twitter bug exposed some Android private tweets to public view
The latest privacy glitch, which went unnoticed for over four years, may trigger yet another EU privacy probe.
🕴 Shadow IT, IaaS & the Security Imperative 🕴
📖 Read
via "Dark Reading: ".
Organizations must strengthen their security posture in cloud environments. That means considering five critical elements about their infrastructure, especially when it operates as an IaaS.📖 Read
via "Dark Reading: ".
Dark Reading
Shadow IT, IaaS & the Security Imperative
Organizations must strengthen their security posture in cloud environments. That means considering five critical elements about their infrastructure, especially when it operates as an IaaS.
ATENTION‼ New - CVE-2016-10739
📖 Read
via "National Vulnerability Database".
In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings.📖 Read
via "National Vulnerability Database".
⚠ WhatsApp fights the spread of deadly fake news with recipient limit ⚠
📖 Read
via "Naked Security".
WhatsApp has capped the number of people you can forward messages to, after India was seized by rumour-inspired mob lynchings.📖 Read
via "Naked Security".
Naked Security
WhatsApp fights the spread of deadly fake news with recipient limit
WhatsApp has capped the number of people you can forward messages to, after India was seized by rumour-inspired mob lynchings.
⚠ DNC targeted by Russian hackers beyond 2018 midterms, it claims ⚠
📖 Read
via "Naked Security".
The Democratic National Committee has filed a civil complaint accusing Russia of trying to hack its computers as recently as November 2018.📖 Read
via "Naked Security".
Naked Security
DNC targeted by Russian hackers beyond 2018 midterms, it claims
The Democratic National Committee has filed a civil complaint accusing Russia of trying to hack its computers as recently as November 2018.
⚠ Bicycle-riding hitman convicted with Garmin GPS watch location data ⚠
📖 Read
via "Naked Security".
Location data extracted from the athletic hitman's Garmin GPS watch and TomTom sat nav led to his conviction in two gangland murders.📖 Read
via "Naked Security".
Naked Security
Bicycle-riding hitman convicted with Garmin GPS watch location data
Location data extracted from the athletic hitman’s Garmin GPS watch and TomTom sat nav led to his conviction in two gangland murders.
⚠ Rogue websites can turn vulnerable browser extensions into back doors ⚠
📖 Read
via "Naked Security".
A researcher has found that websites can use some extensions to bypass security policies, execute code, and even install other extensions.📖 Read
via "Naked Security".
Naked Security
Rogue websites can turn vulnerable browser extensions into back doors
A researcher has found that websites can use some extensions to bypass security policies, execute code, and even install other extensions.
🔐 Rushing to patch? Here's how to prioritize your security efforts 🔐
📖 Read
via "Security on TechRepublic".
When addressing security vulnerabilities, enterprises should focus on those with publicly available exploit code, according to a Kenna Security report.📖 Read
via "Security on TechRepublic".
TechRepublic
Rushing to patch? Here's how to prioritize your security efforts
When addressing security vulnerabilities, enterprises should focus on those with publicly available exploit code, according to a Kenna Security report.
❌ Adobe Issues Unscheduled Updates for Experience Manager Platform ❌
📖 Read
via "Threatpost | The first stop for security news".
The patches are part of Adobe's second unscheduled update this month.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Adobe Issues Unscheduled Updates for Experience Manager Platform
The patches are Adobe's second unscheduled update this month.