πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2021-3903 β€Ό

vim is vulnerable to Heap-based Buffer Overflow

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-21250 β€Ό

CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MY_Security.php.

πŸ“– Read

via "National Vulnerability Database".
⚠ Apple ships Monterey with security updates, fixes 0-day in Watch and TV products, updates iDevices ⚠

A slew of security bulletins from Apple HQ, including 37 bugs listed as fixed in the initial public release of macOS Monterey.

πŸ“– Read

via "Naked Security".
πŸ•΄ HelpSystems Acquires Digital Guardian, Extends DLP Capabilities πŸ•΄

The acquisition strengthens HelpSystems’ data security portfolio with data loss prevention capabilities across the endpoint, network, and cloud.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2021-3906 β€Ό

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-3904 β€Ό

grav is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2019-19810 β€Ό

Zoom Call Recording 6.3.1 from ZOOM International is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service. A remote unauthenticated attacker can exploit this vulnerability by sending crafted RMI requests to execute arbitrary code on the target host.

πŸ“– Read

via "National Vulnerability Database".
❌ Grief Ransomware Targets NRA ❌

Grief, a ransomware group with ties to Russia-based Evil Corp, claims to have stolen data from the gun-rights group and has posted files on its dark web site. 

πŸ“– Read

via "Threat Post".
⚠ S3 Ep56: Cryptotrading rodent, ransomware hackback, and a Docusign phish [Podcast] ⚠

Latest episode - listen now! Serious security explained with personality in plain English.

πŸ“– Read

via "Naked Security".
πŸ•΄ You've Just Been Ransomed ... Now What? πŸ•΄

Six crucial steps executives and IT teams should be prepared to take immediately after a ransomware attack.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2021-22475 β€Ό

There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-22454 β€Ό

A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause core dump.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-36990 β€Ό

There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-22462 β€Ό

A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-22486 β€Ό

There is a issue of Unstandardized field names in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-22458 β€Ό

A component of the HarmonyOS has a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. Local attackers may exploit this vulnerability to cause arbitrary code execution.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-22470 β€Ό

A component of the HarmonyOS has a Privileges Controls vulnerability. Local attackers may exploit this vulnerability to expand the Recording Trusted Domain.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-22403 β€Ό

There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-22464 β€Ό

A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause system Soft Restart.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-22278 β€Ό

A certificate validation vulnerability in PCM600 Update Manager allows attacker to get unwanted software packages to be installed on computer which has PCM600 installed.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-22474 β€Ό

There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions.

πŸ“– Read

via "National Vulnerability Database".