πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“’ Best free malware removal tools 2021 πŸ“’

Worried your device is infected? Here are the tools you need to get rid of malicious software

πŸ“– Read

via "ITPro".
πŸ“’ Out-of-hours ransomware attacks have a greater impact on revenue πŸ“’

Seven in ten security pros called in to handle attacks were intoxicated, report finds

πŸ“– Read

via "ITPro".
πŸ“’ US, UK agencies warn Iran-backed hackers are targeting critical sectors πŸ“’

The state-sponsored APT groups exploited Fortinet and Microsoft Exchange flaws to gain access to systems

πŸ“– Read

via "ITPro".
πŸ“’ CISOs are missing holidays due to excessive overtime πŸ“’

Tessian research shows an alarming number of security leaders are sacrificing important areas of their life for the job

πŸ“– Read

via "ITPro".
πŸ“’ Ubiquiti Networks UniFi Dream Machine Pro review: All the security you need in one handy box πŸ“’

An affordable security gateway that can take care of a wide range of security needs

πŸ“– Read

via "ITPro".
πŸ“’ TikTok phishing campaign tried to scam over 125 influencer accounts πŸ“’

Hackers threatened to delete accounts over copyright violations

πŸ“– Read

via "ITPro".
πŸ“’ What is e-safety? πŸ“’

We explain what e-safety is and how it can be managed in schools and beyond

πŸ“– Read

via "ITPro".
β€Ό CVE-2021-28710 β€Ό

certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structures (page tables) may (and, on suitable hardware, by default will) be shared between CPUs, for second-level translation (EPT), and IOMMUs. These page tables are presently set up to always be 4 levels deep. However, an IOMMU may require the use of just 3 page table levels. In such a configuration the lop level table needs to be stripped before inserting the root table's address into the hardware pagetable base register. When sharing page tables, Xen erroneously skipped this stripping. Consequently, the guest is able to write to leaf page table entries.

πŸ“– Read

via "National Vulnerability Database".
⚠ Black Friday and Cyber Monday – here’s what you REALLY need to do! ⚠

The world fills up with cybersecurity tips every year when Black Friday comes round. But what about the rest of they year?

πŸ“– Read

via "Naked Security".
πŸ—“οΈ Wind turbine giant Vestas confirms data breach following β€˜cybersecurity incident’ πŸ—“οΈ

Danish company has also β€˜initiated a gradual and controlled reopening of all IT systems’

πŸ“– Read

via "The Daily Swig".
πŸ•΄ Why the 'Basement Hacker' Stereotype Is Wrong β€” and Dangerous πŸ•΄

It engenders a false sense of superiority that spurs complacency among risk managers and executives, who in turn may underinvest in security teams, rely too much on automation, or both.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2021-42737 β€Ό

Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-40772 β€Ό

Adobe Prelude version 10.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-42733 β€Ό

Adobe Prelude version 10.1 (and earlier) is affected by an improper input validation vulnerability in the XDCAMSAM directory. An unauthenticated attacker could leverage this vulnerability to execute arbitrary code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-43015 β€Ό

Adobe InCopy version 16.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-43016 β€Ό

Adobe InCopy version 16.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-40773 β€Ό

Adobe Prelude version 10.1 (and earlier) is affected by a null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-43559 β€Ό

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. The "delete related badge" functionality did not include the necessary token check to prevent a CSRF risk.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-26614 β€Ό

ius_get.cgi in IpTime C200 camera allows remote code execution. A remote attacker may send a crafted parameters to the exposed vulnerable web service interface which invokes the arbitrary shell command.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-7882 β€Ό

Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It occurs because the parameter contains path traversal characters(ie. '../../../')

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-42727 β€Ό

Acrobat RoboHelp Server versions 2020.0.1 (and earlier) are affected by a Path traversal vulnerability. The authenticated attacker can upload arbitrary files outside of the intended directory to cause remote code execution with privileges of user running Tomcat. Exploitation of this issue requires user interaction in that a victim must navigate to a planted file on the server.

πŸ“– Read

via "National Vulnerability Database".