🕴 Military, Government Users Just as Bad About Password Hygiene as Civilians 🕴
📖 Read
via "Dark Reading: ".
New report comes out just as group of US senators chastise Secretary of State Mike Pompeo for not using multifactor authentication.📖 Read
via "Dark Reading: ".
Dark Reading
Military, Government Users Just as Bad About Password Hygiene as Civilians
New report comes out just as group of US senators chastise Secretary of State Mike Pompeo for not using multifactor authentication.
🕴 EternalBlue Infections Persist 🕴
📖 Read
via "Dark Reading: ".
Indonesia, Taiwan, Vietnam, Thailand, Egypt, Russia, China, among the top 10 nations with the most machines infected with the exploit.📖 Read
via "Dark Reading: ".
Dark Reading
EternalBlue Infections Persist
Indonesia, Taiwan, Vietnam, Thailand, Egypt, Russia, China, among the top 10 nations with the most machines infected with the exploit.
❌ E.U.: Tech Giants Face Big Fines, 1 Hour Limit to Remove Extremist Content ❌
📖 Read
via "The first stop for security news | Threatpost ".
The rules would apply to all hosting service providers offering services in the E.U., regardless of size, even if they’re not based there.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
E.U.: Tech Giants Face Big Fines, 1 Hour Limit to Remove Extremist Content
The rules would apply to all hosting service providers offering services in the E.U., regardless of size, even if they’re not based there.
🕴 How Secure are our Voting Systems for November 2018? 🕴
📖 Read
via "Dark Reading: ".
Anomali CEO Hugh Njemanze discusses the importance of sharing threat intelligence across the country's highly decentralized voting systems to safeguard the integrity of upcoming elections.📖 Read
via "Dark Reading: ".
Dark Reading
How Secure are our Voting Systems for November 2018?
Anomali CEO Hugh Njemanze discusses the importance of sharing threat intelligence across the country's highly decentralized voting systems to safeguard the integrity of upcoming elections.
❌ Researchers Heat Up Cold-Boot Attack That Works on All Laptops ❌
📖 Read
via "The first stop for security news | Threatpost ".
The attack bypasses BIOS mitigations for cold-boot compromise on models from Apple, Dell, Lenovo and all others made in the last 10 years.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Researchers Heat Up Cold-Boot Attack That Works on All Laptops
The attack bypasses BIOS mitigations for cold-boot compromise on models from Apple, Dell, Lenovo and all others made in the last 10 years.
🔐 5 ways to block spam calls 🔐
📖 Read
via "Security on TechRepublic".
Annoying spam calls are on the rise, and here's how to block 'em, explains TechRepublic's Tom Merritt📖 Read
via "Security on TechRepublic".
TechRepublic
Top 5 ways to block spam calls
Those annoying spam calls are on the rise. Tom Merritt has five solutions.
⚠ Monday review – the hot 25 stories of the week ⚠
📖 Read
via "Naked Security".
From the hidden camera found in an AirBnb room and the smart TVs now admitting to viewers they spied on them to Google Chrome creating passwords for you, and more!📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 25 stories of the week
From the hidden camera found in an AirBnb room and the smart TVs now admitting to viewers they spied on them to Google Chrome creating passwords for you, and more!
⚠ Facebook’s robot coders step into the future of programming ⚠
📖 Read
via "Naked Security".
Like a good junior programmer, Facebook's AI is cutting its teeth with a bit of bug fixing.📖 Read
via "Naked Security".
Naked Security
Facebook’s robot coders step into the future of programming
Like a good junior programmer, Facebook’s AI is cutting its teeth with a bit of bug fixing.
⚠ On the hook! Phishing trip nets “Barbara” 5 years and whopping fine ⚠
📖 Read
via "Naked Security".
The romance and business email compromise scammer pled guilty to fraud amounting to $25m.📖 Read
via "Naked Security".
Naked Security
On the hook! Phishing trip nets “Barbara” 5 years and whopping fine
The romance and business email compromise scammer pled guilty to fraud amounting to $25m.
⚠ Deepfake pics and videos set off Facebook’s fake news detector ⚠
📖 Read
via "Naked Security".
The social network is expanding its effort to stamp out fake news.📖 Read
via "Naked Security".
Naked Security
Deepfake pics and videos set off Facebook’s fake news detector
The social network is expanding its effort to stamp out fake news.
🔐 Top 5 ways to block spam calls 🔐
📖 Read
via "Security on TechRepublic".
Those annoying spam calls are on the rise, but TechRepublic's Tom Merritt has 5 solutions📖 Read
via "Security on TechRepublic".
TechRepublic
Top 5 ways to block spam calls
Those annoying spam calls are on the rise. Tom Merritt has five solutions.
⚠ Vote now! Which web browser do you trust the most? ⚠
📖 Read
via "Naked Security".
Your web browser goes with you everywhere on the web. But how much do you trust it?📖 Read
via "Naked Security".
Naked Security
Vote now! Which web browser do you trust the most?
Your web browser goes with you everywhere on the web. But how much do you trust it?
🕴 The 7 Habits of Highly Effective Security Teams 🕴
📖 Read
via "Dark Reading: ".
Security requires smart people, processes, and technology. Too often, the "people" portion of the PPT equation is neglected.📖 Read
via "Dark Reading: ".
Dark Reading
The 7 Habits of Highly Effective Security Teams
Security requires smart people, processes, and technology. Too often, the people portion of the PPT equation is neglected.
❌ CSS-Based Attack Causes iOS, macOS Devices to Crash ❌
📖 Read
via "The first stop for security news | Threatpost ".
The attack stems from a glitch in WebKit, an HTML layout browser engine in Apple’s Safari browser.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
CSS-Based Attack Causes iOS, macOS Devices to Crash
The attack stems from a glitch in WebKit, an HTML layout browser engine in Apple’s Safari browser.
ATENTION‼ New - CVE-2017-15705
📖 Read
via "National Vulnerability Database".
A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain unclosed tags in emails that cause markup to be handled incorrectly leading to scan timeouts. In Apache SpamAssassin, using HTML::Parser, we setup an object and hook into the begin and end tag event handlers In both cases, the "open" event is immediately followed by a "close" event - even if the tag *does not* close in the HTML being parsed. Because of this, we are missing the "text" event to deal with the object normally. This can cause carefully crafted emails that might take more scan time than expected leading to a Denial of Service. The issue is possibly a bug or design decision in HTML::Parser that specifically impacts the way Apache SpamAssassin uses the module with poorly formed html. The exploit has been seen in the wild but not believed to have been purposefully part of a Denial of Service attempt. We are concerned that there may be attempts to abuse the vulnerability in the future.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-9045
📖 Read
via "National Vulnerability Database".
A code execution vulnerability exists in ProcessMaker Enterprise Core 3.0.1.7-community. A specially crafted web request can cause unsafe deserialization potentially resulting in PHP code being executed. An attacker can send a crafted web parameter to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
🕴 Ransomware Takes Down Airport's Flight Information Screens 🕴
📖 Read
via "Dark Reading: ".
The attack left airport staff to post flight times and gates on whiteboards at Bristol Airport in Britain.📖 Read
via "Dark Reading: ".
Darkreading
Ransomware Takes Down Airport's Flight Information Screens
The attack left airport staff to post flight times and gates on whiteboards at Bristol Airport in Britain.
❌ Old WordPress Plugin Being Exploited in RCE Attacks ❌
📖 Read
via "The first stop for security news | Threatpost ".
Old instances of the popular WordPress Duplicator Plugin are leaving sites open to remote code execution attacks.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Old WordPress Plugin Being Exploited in RCE Attacks
Old instances of the popular WordPress Duplicator Plugin are leaving sites open to remote code execution attacks.
❌ Facebook Now Offers Bounties For Access Token Exposure ❌
📖 Read
via "The first stop for security news | Threatpost ".
The newly expanded Facebook bug bounty program sniffs out access token exposure flaws.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Facebook Now Offers Bounties For Access Token Exposure
The newly expanded Facebook bug bounty program sniffs out access token exposure flaws.
ATENTION‼ New - CVE-2017-2777
📖 Read
via "National Vulnerability Database".
An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can cause an integer overflow resulting in heap overflow. An attacker can send file to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-14443
📖 Read
via "National Vulnerability Database".
An exploitable information leak vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation incorrectly checks the number of GET parameters supplied, leading to an arbitrarily controlled information leak on the whole device memory. An attacker can send an authenticated HTTP request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".