🛡 Cybersecurity & Privacy 🛡 - News

Data resiliency is key to surviving a ransomware attack, expert says

It's not "if" but "when" you'll be attacked, cybersecurity expert says. Checking on your data and backups is something businesses should do regularly.

237 views22:51

🦿 How to be prepared for a ransomware attack: Check your data and backups 🦿

Expert says ransomware attacks will happen, and your company has to be prepared long before the attack hits.

📖 Read

via "Tech Republic".

How to be prepared for a ransomware attack: Check your data and backups

Expert says ransomware attacks will happen, and your company has to be prepared long before the attack hits.

250 views22:51

🕴 Despite Heightened Cyber-Risks, Few Security Leaders Report to CEO 🕴

A new report suggests that top management at most companies still don't get security.

📖 Read

via "Dark Reading".

242 views23:05

‼ CVE-2021-34391 ‼

Trusty TLK contains a vulnerability in the NVIDIA TLK kernelÃ¯Â¿Â½s tz_handle_trusted_app_smc function where a lack of integer overflow checks on the req_off and param_ofs variables leads to memory corruption of critical kernel structures.

📖 Read

via "National Vulnerability Database".

244 views00:27

‼ CVE-2021-34396 ‼

Bootloader contains a vulnerability in access permission settings where unauthorized software may be able to overwrite NVIDIA MB2 code, which would result in limited denial of service.

📖 Read

via "National Vulnerability Database".

252 views00:27

‼ CVE-2021-34393 ‼

Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability might allow an attacker to exploit the deserializer to impact code execution, causing information disclosure.

📖 Read

via "National Vulnerability Database".

248 views00:27

‼ CVE-2021-34395 ‼

Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user with local privileges, which might lead to limited information disclosure and limited denial of service.

📖 Read

via "National Vulnerability Database".

271 views00:27

‼ CVE-2021-34397 ‼

Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service.

📖 Read

via "National Vulnerability Database".

327 views00:30

‼ CVE-2021-34392 ‼

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary checks, which might lead to denial of service.

📖 Read

via "National Vulnerability Database".

363 views00:30

‼ CVE-2021-34390 ‼

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow on the size parameter of the tz_map_shared_mem function.

📖 Read

via "National Vulnerability Database".

368 views00:30

❌ SonicWall ‘Botches’ October Patch for Critical VPN Bug ❌

Company finally rolls out the complete fix this week for an RCE flaw affecting some 800,000 devices that could result in crashes or prevent users from connecting to corporate resources.

📖 Read

via "Threat Post".

SonicWall ‘Botches’ October Patch for VPN Bug

Company finally rolls out the complete fix this week for a flaw affecting some 800,000 devices that could result in crashes or prevent users from connecting to corporate resources.

370 views10:53

‼ CVE-2021-35210 ‼

Contao 4.5.x through 4.9.x before 4.9.16, and 4.10.x through 4.11.x before 4.11.5, allows XSS. It is possible to inject code into the tl_log table that will be executed in the browser when the system log is called in the back end.

📖 Read

via "National Vulnerability Database".

333 views12:17

‼ CVE-2021-29084 ‼

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Security Advisor report management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors.

📖 Read

via "National Vulnerability Database".

332 views12:17

❌ Unpatched Linux Marketplace Bugs Allow Wormable Attacks, Drive-By RCE ❌

A pair of zero-days affecting Pling-based marketplaces could allow for some ugly attacks on unsuspecting Linux enthusiasts -- with no patches in sight.

📖 Read

via "Threat Post".

Unpatched Linux Marketplace Bugs Allow Wormable Attacks, Drive-By RCE

A pair of zero-days affecting Pling-based marketplaces could allow for some ugly attacks on unsuspecting Linux enthusiasts — with no patches in sight.

351 views12:23

🕴 Expecting the Unexpected: Tips for Effectively Mitigating Ransomware Attacks in 2021 🕴

Cybercriminals continually innovate to thwart security protocols, but organizations can take steps to prevent and mitigate ransomware attacks.

📖 Read

via "Dark Reading".

335 views14:05

🦿 How to better detect and prevent Business Email Compromise attacks 🦿

These types of email attacks rely on simple language and exploit human nature to scam their victims, making detection difficult, says Cisco Talos.

📖 Read

via "Tech Republic".

How to better detect and prevent Business Email Compromise attacks

These types of email attacks rely on simple language and exploit human nature to scam their victims, making detection difficult, says Cisco Talos.

352 views14:52

❌ REvil Ransomware Code Ripped Off by Rivals ❌

The LV ransomware operators likely used a hex editor to repurpose a REvil binary almost wholesale, for their own nefarious purposes.

📖 Read

via "Threat Post".

REvil Ransomware Code Ripped Off by Rivals

The LV ransomware operators likely used a hex editor to repurpose a REvil binary almost wholesale, for their own nefarious purposes.

298 views15:23

🦿 Employees are valuable assets: Why you need to safeguard them 🦿

Two experts suggest calling employees "insider threats" is counterproductive; employees are assets needing protection.

📖 Read

via "Tech Republic".

Employees are valuable assets: Why you need to safeguard them

Two experts suggest calling employees "insider threats" is counterproductive; employees are assets needing protection.

283 views15:52

❌ Critical Palo Alto Cyber-Defense Bug Allows Remote ‘War Room’ Access ❌

Remote, unauthenticated cyberattackers can infiltrate and take over the Cortex XSOAR platform, which anchors unified threat intelligence and incident responses.

📖 Read

via "Threat Post".

Critical Palo Alto Cyber-Defense Bug Allows Remote ‘War Room’ Access

Remote, unauthenticated cyberattackers can infiltrate the Cortex XSOAR platform, which anchors unified threat intelligence and incident responses, and take command.

276 views15:55

‼ CVE-2021-25950 ‼

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

📖 Read

via "National Vulnerability Database".

254 views16:17