πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ” How credential stuffing contributed to 8.3B malicious botnet logins in early 2018 πŸ”

Malicious login attempts from bots increased by by almost 2 billion from April to May 2018. Here's who is at risk.

πŸ“– Read

via "Security on TechRepublic".
ATENTIONβ€Ό New - CVE-2017-1794

IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. IBM X-Force ID: 137039.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ The Risk Management Struggle πŸ•΄

The majority of organizations are struggling to implement a risk-based approach to security - even though risk reduction has become the primary metric for measuring the effectiveness of enterprise security strategies. Read the report and get more details today!

πŸ“– Read

via "Dark Reading: ".
❌ Critical Out-of-Band Patch Issued for Adobe Acrobat Reader ❌

Overall seven flaws were patched - including one critical vulnerability that could lead to arbitrary code execution.

πŸ“– Read

via "The first stop for security news | Threatpost ".
❌ Mirai Masterminds Helping FBI Snuff Out Cybercrime ❌

The three hackers behind the infamous Mirai botnet have been helping law enforcement take down cybercriminals across the globe.

πŸ“– Read

via "The first stop for security news | Threatpost ".
πŸ•΄ WebAuthn, FIDO2 Infuse Browsers, Platforms with Strong Authentication πŸ•΄

New standards offer protection against hacking, credential theft, phishing attacks, and hope for the end of an era of passwords as a security construct.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Mirai Hackers' Sentence Includes No Jail Time πŸ•΄

The trio behind Mirai sentenced to probation and public service in return for cooperation with law enforcement and researchers.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ As Tech Drives the Business, So Do CISOs πŸ•΄

Security leaders are evolving from technicians to business executives as tech drives enterprise projects, applications, and goals.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Cryptojackers Grow Dramatically on Enterprise Networks πŸ•΄

A new report shows that illicit cryptomining malware is growing by leaps and bounds on the networks of unsuspecting victims.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ NSS Labs Files Antitrust Suit Against Symantec, CrowdStrike, ESET, AMTSO πŸ•΄

Suit underscores longtime battle between vendors and labs over control of security testing protocols.

πŸ“– Read

via "Dark Reading: ".
⚠ Western Digital goes quiet on unpatched MyCloud flaw ⚠

Western Digital has failed to patch a serious security vulnerability in its MyCloud NAS drives that it was told about more than a year ago, researchers have alleged.

πŸ“– Read

via "Naked Security".
⚠ FBI wants to keep β€œhelpful” Mirai botnet authors around ⚠

The young men behind the powerful IoT device botnet have been working undercover with law enforcement since they were first fingered.

πŸ“– Read

via "Naked Security".
⚠ US military given the power to hack back/defend forward ⚠

The new preventative cybersecurity powers include potentially acting against countries considered friendly toward the US - a risky move, some say.

πŸ“– Read

via "Naked Security".
❌ Thousands of Breached Websites Turn Up MagBo Black Market ❌

The research team said it has shared its findings with law enforcement and victims are being notified.

πŸ“– Read

via "The first stop for security news | Threatpost ".
⚠ Man who shared Deadpool movie on Facebook faces 6 months in jail ⚠

US government recommended six months behind bars. That’s one month for every million people that viewed a part of the pirated movie, apparently.

πŸ“– Read

via "Naked Security".
❌ Magecart Strikes Again, Siphoning Payment Info from Newegg ❌

The data breach, hard on the heels of the British Airways breach, shows that Magecart is quickly evolving and shows no signs of slowing down.

πŸ“– Read

via "The first stop for security news | Threatpost ".
πŸ•΄ Turn the NIST Cybersecurity Framework into Reality: 5 Steps πŸ•΄

Actionable advice for tailoring the National Institute of Standards and Technology's security road map to your company's business needs.

πŸ“– Read

via "Dark Reading: ".
πŸ” Account takeover attacks ramping up, leading to explosion of phishing πŸ”

ATO attacks steal a person's credentials and use them to send emails from their account, according to a recent Barracuda Networks report.

πŸ“– Read

via "Security on TechRepublic".
❌ Cisco Issues New Warning for 6-Month-Old Critical Bug in IOS XE ❌

Vulnerability allowed an unauthenticated remote attacker to log in to a device at the time the system initially boots up.

πŸ“– Read

via "The first stop for security news | Threatpost ".
πŸ•΄ Turn the NIST Cybersecurity Framework into Reality: 5 Steps πŸ•΄

Actionable advice for tailoring the National Institute of Standards and Technology's security road map to your company's business needs.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Japanese Cryptocurrency Exchange Hit with $60M Theft πŸ•΄

The incident highlights a broader problem of poor security in cryptocurrency exchanges throughout the country.

πŸ“– Read

via "Dark Reading: ".