πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
ATENTIONβ€Ό New - CVE-2018-12199

Buffer overflow in an OS component in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel TXE version before 3.1.60 or 4.0.10 may allow a privileged user to potentially execute arbitrary code via physical access.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12198

Insufficient input validation in Intel(R) Server Platform Services HECI subsystem before version SPS_E5_04.00.04.393.0 may allow privileged user to potentially cause a denial of service via local access.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12196

Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow a privileged user to potentially execute arbitrary code via local access.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12192

Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before version SPS_E5_04.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12191

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) TXE before versions 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12190

Insufficient input validation in Intel CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially execute arbitrary code via local access.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12189

Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12189

Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before 3.1.60 or 4.0.10 may allow privileged user to potentially modify data via local access.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12188

Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0.10 may allow an unauthenticated user to potentially modify data via physical access.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12187

Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially cause a denial of service via network access.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-12185

Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenticated user to potentially execute arbitrary code via physical access.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Ransomware's New Normal πŸ•΄

GandCrab's evolution underscores a shift in ransomware attack methods.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Criminals Use One Line of Code to Steal Card Data from E-Commerce Sites πŸ•΄

New JavaScript Sniffer is similar to malware used in the Magecart campaign last year that affected over 800 sites.

πŸ“– Read

via "Dark Reading: ".
⚠ Will the next version of Android get location privacy right? ⚠

Google has confirmed that improved control over location tracking is one of several new privacy features in the next version of its mobile OS, Android Q.

πŸ“– Read

via "Naked Security".
⚠ How to make DuckDuckGo your default Chrome search engine ⚠

Good news for the privacy-conscious. Chrome 73, released Tuesday, now includes the DuckDuckGo search engine as an option.

πŸ“– Read

via "Naked Security".
⚠ Facebook outage coincides with (or causes?) 3m new Telegram users ⚠

A worldwide, nearly day-long outage at Facebook led to Telegram having a busy, busy day.

πŸ“– Read

via "Naked Security".
⚠ Ep. 023 – Facebook promises and Google Chrome patches [PODCAST] ⚠

Here's the latest Naked Security podcast - listen now, and tell your friends and colleagues about us, too!

πŸ“– Read

via "Naked Security".
πŸ” How to view passwords in Android Chrome πŸ”

If you can't remember a password for a website you know Chrome saved, you can view it with these tips.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ On Norman Castles and the Internet πŸ•΄

When the Normans conquered England, they built castles to maintain security. But where are the castles of the Internet?

πŸ“– Read

via "Dark Reading: ".
⚠ You left WHAT on that USB drive?! ⚠

Nudies, taxes, and memos - oh, my! Research shows that even if we think we've deleted content on the sticks, we're leaving all that and more.

πŸ“– Read

via "Naked Security".
❌ Unpatched Fujitsu Wireless Keyboard Bug Allows Keystroke Injection ❌

An unpatched high-severity vulnerability allows keystroke injections in Fujitsu wireless keyboards.

πŸ“– Read

via "Threatpost".