🕴 What Colonial Pipeline Means for Commercial Building Cybersecurity 🕴
📖 Read
via "Dark Reading".
Banks and hospitals may be common targets, but now commercial real estate must learn to protect itself against stealthy hackers.📖 Read
via "Dark Reading".
Dark Reading
What Colonial Pipeline Means for Commercial Building Cybersecurity
Banks and hospitals may be common targets, but now commercial real estate must learn to protect itself against stealthy hackers.
‼ CVE-2021-21779 ‼
📖 Read
via "National Vulnerability Database".
A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
🕴 The NSA's 'New' Mission: Get More Public With the Private Sector 🕴
📖 Read
via "Dark Reading".
The National Security Agency's gradual emergence from the shadows was "inevitable" in cybersecurity, says Vinnie Liu, co-founder and CEO of offensive security firm Bishop Fox and a former NSA analyst. Now the agency has to figure out how to best work with the private sector, especially organizations outside the well-resourced and seasoned Fortune 100.📖 Read
via "Dark Reading".
Dark Reading
The NSA's 'New' Mission: Get More Public With the Private Sector
The National Security Agency's gradual emergence from the shadows was "inevitable" in cybersecurity, says Vinnie Liu, co-founder and CEO of offensive security firm Bishop Fox and a former NSA analyst. Now the agency has to figure out how to best work with…
🕴 Kaseya Hacked via Authentication Bypass 🕴
📖 Read
via "Dark Reading".
The Kaseya ransomware attack is believed to have been down to an authentication bypass. Yes, ransomware needs to be on your radar -- but good authentication practices are also imperative.📖 Read
via "Dark Reading".
Dark Reading
Kaseya Hacked via Authentication Bypass
The Kaseya ransomware attack is believed to have been down to an authentication bypass. Yes, ransomware needs to be on your radar -- but good authentication practices are also imperative.
🦿 Android app users targeted with cryptomining scams 🦿
📖 Read
via "Tech Republic".
Found on Google Play and third-party app stores, the apps discovered by Lookout stole an estimated $350,000 from more than 93,000 people.📖 Read
via "Tech Republic".
TechRepublic
Android app users targeted with cryptomining scams
Found on Google Play and third-party app stores, the apps discovered by Lookout stole an estimated $350,000 from more than 93,000 people.
🦿 77% of executives plan to hire in the months ahead, according to a new poll 🦿
📖 Read
via "Tech Republic".
West Monroe's executive poll details third-quarter hiring expectations, cybersecurity preparedness, investments to digitize business operations and more.📖 Read
via "Tech Republic".
TechRepublic
77% of executives plan to hire in the months ahead, according to a new poll
West Monroe's executive poll details third-quarter hiring expectations, cybersecurity preparedness, investments to digitize business operations and more.
🦿 "Black Widow" digital premier a cover for malware and scams, says Kaspersky 🦿
📖 Read
via "Tech Republic".
Phishing, malicious files and other forms of fraud have followed the highly awaited movie since it was first delayed due to COVID-19. On the eve of its actual release, the scams have begun anew.📖 Read
via "Tech Republic".
TechRepublic
"Black Widow" digital premier a cover for malware and scams, says Kaspersky
Phishing, malicious files and other forms of fraud have followed the highly awaited movie since it was first delayed due to COVID-19. On the eve of its actual release, the scams have begun anew.
❌ How Fake Accounts and Sneaker-Bots Took Over the Internet ❌
📖 Read
via "Threat Post".
Jason Kent, hacker-in-residence at Cequence Security, discusses fake online accounts, and the fraud they carry out on a daily basis.📖 Read
via "Threat Post".
Threat Post
How Fake Accounts and Sneaker-Bots Took Over the Internet
Jason Kent, hacker-in-residence at Cequence Security, discusses fake online accounts, and the fraud they carry out on a daily basis.
‼ CVE-2021-29150 ‼
📖 Read
via "National Vulnerability Database".
A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25440 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in FactoryCameraFB prior to version 3.4.74 allows untrusted applications to access arbitrary files with an escalated privilege.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25439 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause arbitrary webpage loading in webview.📖 Read
via "National Vulnerability Database".
⚠ PrintNightmare official patch is out – update now! ⚠
📖 Read
via "Naked Security".
Patch now! This security hole could allow almost anyone to take over your whole network from almost any account on almost any computer.📖 Read
via "Naked Security".
Naked Security
PrintNightmare official patch is out – update now!
Patch now! This security hole could allow almost anyone to take over your whole network from almost any account on almost any computer.
🦿 Microsoft patches remaining versions of Windows against PrintNightmare flaw 🦿
📖 Read
via "Tech Republic".
Patches to fix a severe flaw in the Windows Print spooler are now available for Windows 10 Version 1607, Windows Server 2012 and Windows Server 2016.📖 Read
via "Tech Republic".
❌ Coursera Flunks API Security Test in Researchers’ Exam ❌
📖 Read
via "Threat Post".
The problem APIs included numero uno on the OWASP API Security Top 10: a Broken Object Level Authorization (BOLA) issue that could have exposed personal data.📖 Read
via "Threat Post".
Threat Post
Coursera Flunks API Security Test in Researchers’ Exam
The problem APIs included numero uno on the OWASP API Security Top 10: a Broken Object Level Authorization (BOLA) issue that could have exposed personal data.
‼ CVE-2021-29711 ‼
📖 Read
via "National Vulnerability Database".
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 6.2.7.8 , 6.2.7.9, 7.0.3.0, 7.0.4.0, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2 could allow an authenticated user with certain permissions to initiate an agent upgrade through the CLI interface. IBM X-Force ID: 200965.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34609 ‼
📖 Read
via "National Vulnerability Database".
A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.📖 Read
via "National Vulnerability Database".
🦿 How to define DNS in Docker containers 🦿
📖 Read
via "Tech Republic".
Jack Wallen shows you how to configure specific DNS servers for your Docker container deployments.📖 Read
via "Tech Republic".
TechRepublic
How to define DNS in Docker containers
Jack Wallen shows you how to configure specific DNS servers for your Docker container deployments.
🕴 New WildPressure Malware Capable of Targeting Windows and MacOS 🕴
📖 Read
via "Dark Reading".
The Trojan sends information back to the attackers' servers about the programming language of a target device.📖 Read
via "Dark Reading".
Dark Reading
New WildPressure Malware Capable of Targeting Windows and MacOS
The Trojan sends information back to the attackers' servers about the programming language of a target device.
❌ Oil & Gas Targeted in Year-Long Cyber-Espionage Campaign ❌
📖 Read
via "Threat Post".
A global effort to steal information from energy companies is using sophisticated social engineering to deliver Agent Tesla and other RATs.📖 Read
via "Threat Post".
Threat Post
Oil & Gas Targeted in Year-Long Cyber-Espionage Campaign
A global effort to steal information from energy companies is using sophisticated social engineering to deliver Agent Tesla and other RATs.
‼ CVE-2020-20363 ‼
📖 Read
via "National Vulnerability Database".
Crossi Site Scripting (XSS) vulnerability in PbootCMS 2.0.3 in admin.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1596 ‼
📖 Read
via "National Vulnerability Database".
Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a denial of service (DoS) condition on an affected device. These vulnerabilities are due to incorrect processing of certain LLDP packets at ingress time. An attacker could exploit these vulnerabilities by sending crafted LLDP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to continuously consume memory, which could cause the device to crash and reload, resulting in a DoS condition. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).📖 Read
via "National Vulnerability Database".