πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΄ Hacker AI vs. Enterprise AI: A New Threat πŸ•΄

Artificial intelligence and machine learning are being weaponized using the same logic and functionality that legitimate organizations use.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ SaaS Ecosystem Complexity Ratcheting Up Risk of Insider Threats πŸ•΄

Even with common security platforms like CASBs, organizations struggle to deal with the volume of apps and accounts that interact with business-critical data.

πŸ“– Read

via "Dark Reading: ".
⚠ Change your Facebook password now! ⚠

Facebook has done an audit and shocked even itself by finding plaintext passwords in logfiles back to 2012. Change your password now!

πŸ“– Read

via "Naked Security".
ATENTIONβ€Ό New - CVE-2018-13798

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V14), SICAM A8000 CP-8050 (All versions < V2.00). Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the web server. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/TCP or 443/TCP. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the web server. A system reboot is required to recover the web service of the device. At the time of advisory update, exploit code for this security vulnerability is public.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-6462

Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-6461

Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page.

πŸ“– Read

via "National Vulnerability Database".
❌ WordPress Plugin Removed After Zero Day Discovered ❌

The plugin, Social Warfare, is no longer listed after a cross site scripting flaw was found being exploited in the wild.

πŸ“– Read

via "Threatpost".
πŸ•΄ Businesses Manage 9.7PB of Data but Struggle to Protect It πŸ•΄

What's more, their attempts to secure it may be putting information at risk, a new report finds.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2015-6458

Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-6457

Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ FIN7 Cybercrime Gang Rises Again πŸ•΄

The group now employs a new administrative interface for managing its campaigns, as well as documents that link to SQL databases for downloading its code.

πŸ“– Read

via "Dark Reading: ".
⚠ Scammer pleads guilty to fleecing Facebook and Google of $121m ⚠

Large, worldly tech companies would never fall for a wire transfer invoice scam, would they?

πŸ“– Read

via "Naked Security".
⚠ Spycam sex videos of 1,600 motel guests sold to paying subscribers ⚠

1,600 guests were filmed with hidden webcams that livestreamed the action. The site also sold videos.

πŸ“– Read

via "Naked Security".
⚠ Sacked IT guy annihilates 23 of his ex-employer’s AWS servers ⚠

He was fired after four weeks, ripped off the credentials of former colleague "Speedy", and will be mulling it all over for two years in jail.

πŸ“– Read

via "Naked Security".
πŸ” Data protection: Top 3 business challenges πŸ”

More than a quarter of businesses experienced irreparable data loss in the past year, according to a Dell EMC survey.

πŸ“– Read

via "Security on TechRepublic".
⚠ Microsoft Windows 7 patch warns of coming patchocalypse ⚠

Microsoft has issued a patch to remind Windows 7 users that they’ll soon have no patches.

πŸ“– Read

via "Naked Security".
πŸ” Windows 10 DHCP vulnerability allows for remote code execution πŸ”

The vulnerability in Windows 10 and Windows Server 2019 gives attackers an entry point for further exploitation when combined with other vulnerabilities.

πŸ“– Read

via "Security on TechRepublic".
⚠ BitLocker hacked? Disk encryption – and why you still need it [VIDEO] ⚠

Is BitLocker cracked? Is disk encryption still worth it? The answers are "No" and "Yes", and here's why.

πŸ“– Read

via "Naked Security".
πŸ•΄ Security Lessons from My Game Closet πŸ•΄

In an era of popular video games like Fortnite and Minecraft, there is a lot to be learned about risk, luck, and strategy from some old-fashioned board games.

πŸ“– Read

via "Dark Reading: ".
❌ Medtronic Defibrillators Have Critical Flaws, Warns DHS ❌

The unpatched vulnerabilities exist in 20 products made by the popular Medtronics medical device manufacturer, including defibrillators and home patient monitoring systems.

πŸ“– Read

via "Threatpost".