❌ State-sponsored Threat Groups Target Telcos, Steal 5G Secrets ❌
📖 Read
via "Threat Post".
Researchers say China-linked APTs lure victims with bogus Huawei career pages in what they dub ‘Operation Diànxùn’.📖 Read
via "Threat Post".
Threat Post
State-sponsored Threat Groups Target Telcos, Steal 5G Secrets
Researchers say China-linked APTs lure victims with bogus Huawei career pages in what they dub ‘Operation Diànxùn’.
‼ CVE-2020-14358 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35456 ‼
📖 Read
via "National Vulnerability Database".
The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view private chat messages and media files via logcat because of excessive logging.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35455 ‼
📖 Read
via "National Vulnerability Database".
The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Shared Preferences and the SQLite database because of insecure data storage.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-28660 ‼
📖 Read
via "National Vulnerability Database".
rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-35454 ‼
📖 Read
via "National Vulnerability Database".
The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an Android backup because of insecure application configuration.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-20200 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.📖 Read
via "National Vulnerability Database".
❌ Mimecast: SolarWinds Attackers Stole Source Code ❌
📖 Read
via "Threat Post".
A new Mimecast update reveals the SolarWinds hackers accessed several "limited" source code repositories.📖 Read
via "Threat Post".
Threat Post
Mimecast: SolarWinds Attackers Stole Source Code
A new Mimecast update reveals the SolarWinds hackers accessed several "limited" source code repositories.
🕴 COVID, Healthcare Data & the Dark Web: A Toxic Stew 🕴
📖 Read
via "Dark Reading".
The growing treasure trove of healthcare data is proving irresistible -- and profitable -- to bad actors.📖 Read
via "Dark Reading".
Dark Reading
COVID, Healthcare Data & the Dark Web: A Toxic Stew
The growing treasure trove of healthcare data is proving irresistible -- and profitable -- to bad actors.
⚠ Bitcoin scammer who hacked celeb Twitter accounts gets 3 years ⚠
📖 Read
via "Naked Security".
Youngster behind blue-flag Twitter hack of Elon Musk, Bill Gates, Apple Inc. and many others will do three years in prison.📖 Read
via "Naked Security".
Naked Security
Bitcoin scammer who hacked celeb Twitter accounts gets 3 years
Youngster behind blue-flag Twitter hack of Elon Musk, Bill Gates, Apple Inc. and many others will do three years in prison.
❌ $4,000 COVID-19 ‘Relief Checks’ Cloak Dridex Malware ❌
📖 Read
via "Threat Post".
The American Rescue Act is the latest zeitgeisty lure being circulated in an email campaign.📖 Read
via "Threat Post".
Threat Post
$4,000 COVID-19 ‘Relief Checks’ Cloak Dridex Malware
The American Rescue Act is the latest zeitgeisty lure being circulated in an email campaign.
🔏 FBI Warns of PYSA Ransomware Targeting Educational Sector 🔏
📖 Read
via "Digital Guardian".
The FBI provided technical details on the ransomware strain along with indicators of compromise and domains associated with its activity on Tuesday.📖 Read
via "Digital Guardian".
Digital Guardian
FBI Warns of PYSA Ransomware Targeting Educational Sector
The FBI provided technical details on the ransomware strain along with indicators of compromise and domains associated with its activity on Tuesday.
🕴 Teen Behind Twitter Hack Agrees to Three Years in Prison 🕴
📖 Read
via "Dark Reading".
Graham Ivan Clark was 17 when accused of the attack that targeted several high-profile Twitter accounts.📖 Read
via "Dark Reading".
Dark Reading
Teen Behind Twitter Hack Agrees to Three Years in Prison
Graham Ivan Clark was 17 when accused of the attack that targeted several high-profile Twitter accounts.
🕴 CISA Urges Caution on Trickbot Campaigns 🕴
📖 Read
via "Dark Reading".
Advisory warns security teams to guard against advanced Trojan malware.📖 Read
via "Dark Reading".
Dark Reading
CISA Urges Caution on Trickbot Campaigns
Advisory warns security teams to guard against advanced Trojan malware.
🦿 Beware of stalkerware: Stalkers use it to track your every move 🦿
📖 Read
via "Tech Republic".
Kaspersky warns that with a stalkerware app, another person can spy on your activities and view your personal information.📖 Read
via "Tech Republic".
TechRepublic
Beware of stalkerware: Stalkers use it to track your every move
Kaspersky warns that with a stalkerware app, another person can spy on your activities and view your personal information.
🦿 Crimeware-as-a-service is the latest ransomware threat 🦿
📖 Read
via "Tech Republic".
BlackBerry researchers see more double-extortion ransomware attacks, attackers demanding ransom from healthcare patients, and rising bitcoin prices driving the growth of ransomware.📖 Read
via "Tech Republic".
TechRepublic
Crimeware-as-a-service is the latest ransomware threat
BlackBerry researchers see more double-extortion ransomware attacks, attackers demanding ransom from healthcare patients, and rising bitcoin prices driving the growth of ransomware.
‼ CVE-2020-17457 ‼
📖 Read
via "National Vulnerability Database".
Fujitsu ServerView Suite iRMC before 9.62F allows XSS. An authenticated attacker can store an XSS payload in the PSCU_FILE_INIT field of a Save Configuration XML document. The payload is triggered in the HTTP error response pages.📖 Read
via "National Vulnerability Database".
🦿 What consumers really think of the upcoming IDFA opt-in, protecting privacy and smartphone data 🦿
📖 Read
via "Tech Republic".
App developers need to implement workarounds and create an understanding of the benefits of shared data, according to a new survey from AppsFlyer and Mobile Marketing Association.📖 Read
via "Tech Republic".
TechRepublic
What consumers really think of the upcoming IDFA opt-in, protecting privacy and smartphone data
App developers need to implement workarounds and create an understanding of the benefits of shared data, according to a new survey from AppsFlyer and Mobile Marketing Association.
🦿 More than 16 million COVID-themed cyberattacks launched in 2020 🦿
📖 Read
via "Tech Republic".
A Trend Micro report found that its system dealt with 16.4 million threats that used COVID-19 as a hook.📖 Read
via "Tech Republic".
TechRepublic
More than 16 million COVID-themed cyberattacks launched in 2020
A Trend Micro report found that its system dealt with 16.4 million threats that used COVID-19 as a hook.
🦿 Eternal Terminal: How to install for persistent SSH connections 🦿
📖 Read
via "Tech Republic".
If you have trouble with SSH connections breaking, Jack Wallen shows you how you can enjoy a bit more persistence with the help of Eternal Terminal.📖 Read
via "Tech Republic".
TechRepublic
How to install Eternal Terminal for persistent SSH connections
If you have trouble with SSH connections breaking, Jack Wallen shows you how you can enjoy a bit more persistence with the help of Eternal Terminal.
‼ CVE-2019-18235 ‼
📖 Read
via "National Vulnerability Database".
Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the web application may allow an attacker to gain full access using a brute-force password attack.📖 Read
via "National Vulnerability Database".