⚠ Monday review – the hot 23 stories of the week ⚠
📖 Read
via "Naked Security".
From WhatsApps that aren't meant for you to the highly promising USB-C authentication, and everything in between. It's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 23 stories of the week
From WhatsApps that aren’t meant for you to the highly promising USB-C authentication, and everything in between. It’s weekly roundup time.
⚠ Monday review – the hot 23 stories of the week ⚠
📖 Read
via "Naked Security".
From WhatsApps that aren't meant for you to the highly promising USB-C authentication, and everything in between. It's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 23 stories of the week
From WhatsApps that aren’t meant for you to the highly promising USB-C authentication, and everything in between. It’s weekly roundup time.
⚠ Monday review – the hot 23 stories of the week ⚠
📖 Read
via "Naked Security".
From WhatsApps that aren't meant for you to the highly promising USB-C authentication, and everything in between. It's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 23 stories of the week
From WhatsApps that aren’t meant for you to the highly promising USB-C authentication, and everything in between. It’s weekly roundup time.
⚠ Tim Cook demands a way for users to delete their personal data ⚠
📖 Read
via "Naked Security".
The Apple CEO wants the FTC to set up a data-broker clearinghouse so people can see the data that companies have collected on them.📖 Read
via "Naked Security".
Naked Security
Tim Cook demands a way for users to delete their personal data
The Apple CEO wants the FTC to set up a data-broker clearinghouse so people can see the data that companies have collected on them.
⚠ State agency exposes 3TB of data, including FBI info and remote logins ⚠
📖 Read
via "Naked Security".
Oklahoma’s Department of Securities (ODS) exposed 3TB of files in plain text containing sensitive data on the public internet this month.📖 Read
via "Naked Security".
Naked Security
State agency exposes 3TB of data, including FBI info and remote logins
Oklahoma’s Department of Securities (ODS) exposed 3TB of files in plain text containing sensitive data on the public internet this month.
⚠ Attackers used a LinkedIn job ad and Skype call to breach bank’s defences ⚠
📖 Read
via "Naked Security".
A Chilean Senator has taken to Twitter with alarming news – the company running the country’s ATM network suffered a serious cyberattack.📖 Read
via "Naked Security".
Naked Security
Attackers used a LinkedIn job ad and Skype call to breach bank’s defences
A Chilean Senator has taken to Twitter with alarming news – the company running the country’s ATM network suffered a serious cyberattack.
⚠ Twitter bug exposed some Android private tweets to public view ⚠
📖 Read
via "Naked Security".
The latest privacy glitch, which went unnoticed for over four years, may trigger yet another EU privacy probe.📖 Read
via "Naked Security".
Naked Security
Twitter bug exposed some Android private tweets to public view
The latest privacy glitch, which went unnoticed for over four years, may trigger yet another EU privacy probe.
🕴 Shadow IT, IaaS & the Security Imperative 🕴
📖 Read
via "Dark Reading: ".
Organizations must strengthen their security posture in cloud environments. That means considering five critical elements about their infrastructure, especially when it operates as an IaaS.📖 Read
via "Dark Reading: ".
Dark Reading
Shadow IT, IaaS & the Security Imperative
Organizations must strengthen their security posture in cloud environments. That means considering five critical elements about their infrastructure, especially when it operates as an IaaS.
ATENTION‼ New - CVE-2016-10739
📖 Read
via "National Vulnerability Database".
In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings.📖 Read
via "National Vulnerability Database".
⚠ WhatsApp fights the spread of deadly fake news with recipient limit ⚠
📖 Read
via "Naked Security".
WhatsApp has capped the number of people you can forward messages to, after India was seized by rumour-inspired mob lynchings.📖 Read
via "Naked Security".
Naked Security
WhatsApp fights the spread of deadly fake news with recipient limit
WhatsApp has capped the number of people you can forward messages to, after India was seized by rumour-inspired mob lynchings.
⚠ DNC targeted by Russian hackers beyond 2018 midterms, it claims ⚠
📖 Read
via "Naked Security".
The Democratic National Committee has filed a civil complaint accusing Russia of trying to hack its computers as recently as November 2018.📖 Read
via "Naked Security".
Naked Security
DNC targeted by Russian hackers beyond 2018 midterms, it claims
The Democratic National Committee has filed a civil complaint accusing Russia of trying to hack its computers as recently as November 2018.
⚠ Bicycle-riding hitman convicted with Garmin GPS watch location data ⚠
📖 Read
via "Naked Security".
Location data extracted from the athletic hitman's Garmin GPS watch and TomTom sat nav led to his conviction in two gangland murders.📖 Read
via "Naked Security".
Naked Security
Bicycle-riding hitman convicted with Garmin GPS watch location data
Location data extracted from the athletic hitman’s Garmin GPS watch and TomTom sat nav led to his conviction in two gangland murders.
⚠ Rogue websites can turn vulnerable browser extensions into back doors ⚠
📖 Read
via "Naked Security".
A researcher has found that websites can use some extensions to bypass security policies, execute code, and even install other extensions.📖 Read
via "Naked Security".
Naked Security
Rogue websites can turn vulnerable browser extensions into back doors
A researcher has found that websites can use some extensions to bypass security policies, execute code, and even install other extensions.
🔐 Rushing to patch? Here's how to prioritize your security efforts 🔐
📖 Read
via "Security on TechRepublic".
When addressing security vulnerabilities, enterprises should focus on those with publicly available exploit code, according to a Kenna Security report.📖 Read
via "Security on TechRepublic".
TechRepublic
Rushing to patch? Here's how to prioritize your security efforts
When addressing security vulnerabilities, enterprises should focus on those with publicly available exploit code, according to a Kenna Security report.
❌ Adobe Issues Unscheduled Updates for Experience Manager Platform ❌
📖 Read
via "Threatpost | The first stop for security news".
The patches are part of Adobe's second unscheduled update this month.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Adobe Issues Unscheduled Updates for Experience Manager Platform
The patches are Adobe's second unscheduled update this month.
🕴 How Cybercriminals Clean Their Dirty Money 🕴
📖 Read
via "Dark Reading: ".
By using a combination of new cryptocurrencies and peer-to-peer marketplaces, cybercriminals are laundering up to an estimated $200 billion in ill-gotten gains a year. And that's just the beginning.📖 Read
via "Dark Reading: ".
Darkreading
How Cybercriminals Clean Their Dirty Money
By using a combination of new cryptocurrencies and peer-to-peer marketplaces, cybercriminals are laundering up to an estimated $200 billion in ill-gotten gains a year. And that's just the beginning.
🔐 Hackers turn to data theft and resale on the Dark Web for higher payouts 🔐
📖 Read
via "Security on TechRepublic".
Selling personal information and compromised accounts of popular Instragram users has become more lucrative than ransomware and cryptojacking campaigns.📖 Read
via "Security on TechRepublic".
TechRepublic
Hackers turn to data theft and resale on the Dark Web for higher payouts
Selling personal information and compromised accounts of popular Instragram users has become more lucrative than ransomware and cryptojacking campaigns.
❌ Google Fined $57M in Largest GDPR Slap Yet ❌
📖 Read
via "Threatpost | The first stop for security news".
The French Data Protection Authority (DPA) found a lack of transparency when it comes to how Google harvests and uses personal data for ad-targeting purposes.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Google Fined $57M in Largest GDPR Slap Yet
The French Data Protection Authority (DPA) found a lack of transparency when it comes to how Google harvests and uses personal data for ad-targeting purposes.
ATENTION‼ New - CVE-2017-6923
📖 Read
via "National Vulnerability Database".
In Drupal 8.x prior to 8.3.7 When creating a view, you can optionally use Ajax to update the displayed data via filter parameters. The views subsystem/module did not restrict access to the Ajax endpoint to only views configured to use Ajax. This is mitigated if you have access restrictions on the view. It is best practice to always include some form of access restrictions on all views, even if you are using another module to display them.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-6922
📖 Read
via "National Vulnerability Database".
In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not previously provide this protection, allowing an access bypass vulnerability to occur. This issue is mitigated by the fact that in order to be affected, the site must allow anonymous users to upload files into a private file system.📖 Read
via "National Vulnerability Database".