πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2021-36306 β€Ό

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-34358 β€Ό

We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and later

πŸ“– Read

via "National Vulnerability Database".
πŸ“’ Protecting every edge to make hackers’ jobs harder, not yours πŸ“’

How to support and secure hybrid architectures

πŸ“– Read

via "ITPro".
πŸ“’ CISA unveils government cyber security response playbooks πŸ“’

Playbook follows President Biden's April executive order

πŸ“– Read

via "ITPro".
πŸ“’ UK and US pledge to punish cyber criminals at annual meeting πŸ“’

Intelligence and defence officials met at the annual forum to discuss approaches to cyber security for the years ahead

πŸ“– Read

via "ITPro".
πŸ“’ US gov initiative aims to attract 'world-class' cyber security talent πŸ“’

The DHS wants to make it easier to recruit, develop, and retain top cyber security professionals

πŸ“– Read

via "ITPro".
πŸ“’ What is HTTP error 503 and how do you fix it? πŸ“’

It may not always be obvious what's causing the issue, but there are steps you can take to get back online

πŸ“– Read

via "ITPro".
πŸ“’ IT Pro News in Review: FBI hacked, Nvidia-ARM probe, IBM's 'most powerful' quantum chip πŸ“’

Catch up on the biggest headlines of the week in just two minutes

πŸ“– Read

via "ITPro".
πŸ“’ Best free malware removal tools 2021 πŸ“’

Worried your device is infected? Here are the tools you need to get rid of malicious software

πŸ“– Read

via "ITPro".
πŸ“’ Out-of-hours ransomware attacks have a greater impact on revenue πŸ“’

Seven in ten security pros called in to handle attacks were intoxicated, report finds

πŸ“– Read

via "ITPro".
πŸ“’ US, UK agencies warn Iran-backed hackers are targeting critical sectors πŸ“’

The state-sponsored APT groups exploited Fortinet and Microsoft Exchange flaws to gain access to systems

πŸ“– Read

via "ITPro".
πŸ“’ CISOs are missing holidays due to excessive overtime πŸ“’

Tessian research shows an alarming number of security leaders are sacrificing important areas of their life for the job

πŸ“– Read

via "ITPro".
πŸ“’ Ubiquiti Networks UniFi Dream Machine Pro review: All the security you need in one handy box πŸ“’

An affordable security gateway that can take care of a wide range of security needs

πŸ“– Read

via "ITPro".
πŸ“’ TikTok phishing campaign tried to scam over 125 influencer accounts πŸ“’

Hackers threatened to delete accounts over copyright violations

πŸ“– Read

via "ITPro".
πŸ“’ What is e-safety? πŸ“’

We explain what e-safety is and how it can be managed in schools and beyond

πŸ“– Read

via "ITPro".
β€Ό CVE-2021-28710 β€Ό

certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structures (page tables) may (and, on suitable hardware, by default will) be shared between CPUs, for second-level translation (EPT), and IOMMUs. These page tables are presently set up to always be 4 levels deep. However, an IOMMU may require the use of just 3 page table levels. In such a configuration the lop level table needs to be stripped before inserting the root table's address into the hardware pagetable base register. When sharing page tables, Xen erroneously skipped this stripping. Consequently, the guest is able to write to leaf page table entries.

πŸ“– Read

via "National Vulnerability Database".
⚠ Black Friday and Cyber Monday – here’s what you REALLY need to do! ⚠

The world fills up with cybersecurity tips every year when Black Friday comes round. But what about the rest of they year?

πŸ“– Read

via "Naked Security".
πŸ—“οΈ Wind turbine giant Vestas confirms data breach following β€˜cybersecurity incident’ πŸ—“οΈ

Danish company has also β€˜initiated a gradual and controlled reopening of all IT systems’

πŸ“– Read

via "The Daily Swig".
πŸ•΄ Why the 'Basement Hacker' Stereotype Is Wrong β€” and Dangerous πŸ•΄

It engenders a false sense of superiority that spurs complacency among risk managers and executives, who in turn may underinvest in security teams, rely too much on automation, or both.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2021-42737 β€Ό

Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-40772 β€Ό

Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.

πŸ“– Read

via "National Vulnerability Database".