🛡 Cybersecurity & Privacy 🛡 - News
25.9K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
ATENTION New - CVE-2013-2516

Vulnerability in FileUtils v0.7, Ruby Gem Fileutils <= v0.7 Command Injection vulnerability in user supplied url variable that is passed to the shell.

📖 Read

via "National Vulnerability Database".
Where’s the Equifax Data? Does It Matter?

Threat-hunters say the breached data from the massive Equifax incident is nowhere to be found, indicating a spy job.

📖 Read

via "Threatpost | The first stop for security news".
ATENTION New - CVE-2016-10742

Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter.

📖 Read

via "National Vulnerability Database".
Monday review – the hot 28 stories of the week

From McDonald's hamburglars to 1000-character phishing urls, and everything between. It's weekly roundup time.

📖 Read

via "Naked Security".
Will the EU’s new copyright directive ruin the web?

Articles 11 and 13 live on, with the dreaded 'link tax', 'meme killer', 'censorship machine' and all.

📖 Read

via "Naked Security".
Opera integrates a cryptocurrency wallet – is this Web 3.0?

When it appears in the next few weeks, the next version of Opera (“Reborn 3” or “R3”) for Windows, Mac and Linux will become the first mainstream desktop browser to integrate a cryptocurrency wallet.

📖 Read

via "Naked Security".
Mega-crackers back with nearly 100 million new stolen data records

Sounds like the crooks who tried to sell more than 600 million records last week are back with nearly 100 million more...

📖 Read

via "Naked Security".
🕴 Privacy Ops: The New Nexus for CISOs & DPOs 🕴

No longer can privacy be an isolated function managed by legal or compliance departments with little or no connection to the organization's underlying security technology.

📖 Read

via "Dark Reading: ".
⚙️ I Am Not Associated with Swift Recovery Ltd. ⚙️

It seems that someone from a company called Swift Recovery Ltd. is impersonating me -- at least on Telegram. The person is using a photo of me, and is using details of my life available on Wikipedia to convince people that they are me.They are not.If anyone has any more information -- stories, screen shots of chats, etc. -- please forward them to me.


📖 Read

via "Schneier on Security".
When Cyberattacks Pack a Physical Punch

Physical security goes hand in hand with cyberdefense. What happens when – as we see all too often – the physical side is overlooked?

📖 Read

via "Threatpost | The first stop for security news".
Fake text generator is so good its creators don’t want to release full version

OpenAI has created what amounts to a text version of a deepfake - and it’s too scared for humanity to release the full version.

📖 Read

via "Naked Security".
Facebook acts like a law-breaking ‘digital gangster’, says official report

Facebook considers itself to be “ahead of and beyond the law,” UK lawmakers said in a report about "disinformation and 'fake news.'"

📖 Read

via "Naked Security".
If you think your deleted Twitter DMs are sliding into the trash, you’re wrong

They're never deleted, just erased from the UI. You can still see archived messages if you download your data.

📖 Read

via "Naked Security".
Thousands of Android apps bypass Advertising ID to track users

Six years after it was introduced, it looks as if Android’s Advertising ID (AAID) might no longer be the privacy forcefield Google claimed it would be.

📖 Read

via "Naked Security".
Millions of “private” medical helpline calls exposed on internet

Ever wondered what happens to helpline calls recorded "to ensure you get the service you deserve"? It can all go terribly wrong...

📖 Read

via "Naked Security".
🔐 How to use RoboForm to create and secure your website passwords 🔐

RoboForm is an effective tool for creating and managing your website passwords. Learn how to use this password management tool.

📖 Read

via "Security on TechRepublic".
🕴 Security Leaders Are Fallible, Too 🕴

Security leaders set the tone for their organizations, and there are many places where the process can go wrong. Second in a six-part series.

📖 Read

via "Dark Reading: ".
🕴 Palo Alto Networks to Buy Demisto for $560M 🕴

This marks Palo Alto Networks' latest acquisition and its first of 2019.

📖 Read

via "Dark Reading: ".
🕴 6 Tax Season Tips for Security Pros 🕴

Here are some practical ways to ensure your company's safety as Uncle Sam comes calling.

📖 Read

via "Dark Reading: ".
Facebook flaw could have allowed an attacker to hijack accounts

The CSRF bypass flaw has now been fixed, and the researcher who discovered it has netted $25,000.

📖 Read

via "Naked Security".
🕴 Breach in Stanford System Exposes Student Records 🕴

A wide variety of data was visible through the vulnerability.

📖 Read

via "Dark Reading: ".