πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΄ Booter Owner Pleads Guilty in Federal Court πŸ•΄

Illinois man offered "DDoS for hire" services that hit millions of victims.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Intel Focuses on Data Center, Firmware Security Ahead of RSAC πŸ•΄

The new Intel SGX Card is intended to extend application memory security using Intel SGX in existing data center infrastructure.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Persistent Attackers Rarely Use Bespoke Malware πŸ•΄

Study of the Bronze Union group-also known as APT27 or Emissary Panda-underscores how most advanced persistent threat (APT) groups now use administrative tools or slight variants of well-known tools.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ More Than 22,000 Vulns Were Disclosed in 2018, 27% Without Fixes πŸ•΄

As in previous years, input validation vulnerabilities accounted for a substantial proportion of total, Risk Based Security report shows.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ IoT, APIs, and Criminal Bots Pose Evolving Dangers πŸ•΄

A pair of reports reach similar conclusions about some of the threats growing in cyberspace and the industries likely to be most affected.

πŸ“– Read

via "Dark Reading: ".
⚠ US pushed Russian troll factory offline during US midterm elections ⚠

The US blocked internet access to Russian trolls who, they say, were trying to spread FUD.

πŸ“– Read

via "Naked Security".
⚠ US House and Senate debate new data privacy law ⚠

A steady stream of hair-raising revelations about the treatment of users' data by Facebook, et al. is pushing Congress to do *something.*

πŸ“– Read

via "Naked Security".
⚠ Thunderclap: Apple Macs at risk from malicious Thunderbolt peripherals ⚠

Researchers have revealed how malicious Thunderbolt and PCI Express (PCIe) peripherals could be used to compromise computers running macOS, Windows, Linux and FreeBSD.

πŸ“– Read

via "Naked Security".
πŸ•΄ Find your New Favorite Security Tool in the Black Hat Asia Arsenal πŸ•΄

From data exfiltration over FM radio to open-source cybersecurity training suites, Black Hat Asia's Arsenal offers live demos of the latest security tools.

πŸ“– Read

via "Dark Reading: ".
❌ Cisco Fixes Critical Flaw in Wireless VPN, Firewall Routers ❌

Cisco said that CVE-2019-1663, which has a CVSS score of 9.8, allows unauthenticated, remote attackers to execute arbitrary code.

πŸ“– Read

via "Threatpost | The first stop for security news".
πŸ•΄ In 2019, Cryptomining Just Might Have an Even Better Year πŸ•΄

The practice today is so pervasive that cryptojacking scripts are said to be running on an estimated 3% of all sites that users visit.

πŸ“– Read

via "Dark Reading: ".
❌ Coinhive to Mine Its Last Monero in March ❌

The controversial cryptomining service is shutting down.

πŸ“– Read

via "Threatpost | The first stop for security news".
πŸ•΄ European Security Firm to Offer Free Hacking Toolkit πŸ•΄

CQTools suite includes both exploit kits and information-extraction functions, its developers say.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Bots Plague Ticketing Industry πŸ•΄

Bots now account for 39.9% of all ticketing traffic, mostly originating in North America.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Microsoft Debuts Azure Sentinel SIEM, Threat Experts Service πŸ•΄

New services, which are both available in preview, arrive at a time when two major trends are converging on security.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Dow Jones Leak Exposes Watchlist Database πŸ•΄

The Watchlist, which contained the identities of government officials, politicians, and people of political interest, is used to identify risk when researching someone.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2018-12402

The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when sub-resources are loaded as part of "Save Page As..." functionality. For example, a malicious page could recover a visitor's Windows username and NTLM hash by including resources otherwise unreachable to the malicious page, if they can convince the visitor to save the complete web page. Similarly, SameSite cookies are sent on cross-origin requests when the "Save Page As..." menu item is selected to save a page, which can result in saving the wrong version of resources based on those cookies. This vulnerability affects Firefox < 63.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12401

Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string. This could lead to denial of service (DOS) attacks. This vulnerability affects Firefox < 63.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12400

In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-private mode. This allows information leakage of sites visited during private browsing sessions. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12399

When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about which domain is registering the new protocol. This may result in the user approving a protocol handler that they otherwise would not have. This vulnerability affects Firefox < 63.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12398

By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy (CSP). This vulnerability affects Firefox < 63.

πŸ“– Read

via "National Vulnerability Database".