πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
ATENTIONβ€Ό New - CVE-2018-13798

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V14), SICAM A8000 CP-8050 (All versions < V2.00). Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the web server. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/TCP or 443/TCP. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the web server. A system reboot is required to recover the web service of the device. At the time of advisory update, exploit code for this security vulnerability is public.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-6462

Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-6461

Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page.

πŸ“– Read

via "National Vulnerability Database".
❌ WordPress Plugin Removed After Zero Day Discovered ❌

The plugin, Social Warfare, is no longer listed after a cross site scripting flaw was found being exploited in the wild.

πŸ“– Read

via "Threatpost".
πŸ•΄ Businesses Manage 9.7PB of Data but Struggle to Protect It πŸ•΄

What's more, their attempts to secure it may be putting information at risk, a new report finds.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2015-6458

Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-6457

Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ FIN7 Cybercrime Gang Rises Again πŸ•΄

The group now employs a new administrative interface for managing its campaigns, as well as documents that link to SQL databases for downloading its code.

πŸ“– Read

via "Dark Reading: ".
⚠ Scammer pleads guilty to fleecing Facebook and Google of $121m ⚠

Large, worldly tech companies would never fall for a wire transfer invoice scam, would they?

πŸ“– Read

via "Naked Security".
⚠ Spycam sex videos of 1,600 motel guests sold to paying subscribers ⚠

1,600 guests were filmed with hidden webcams that livestreamed the action. The site also sold videos.

πŸ“– Read

via "Naked Security".
⚠ Sacked IT guy annihilates 23 of his ex-employer’s AWS servers ⚠

He was fired after four weeks, ripped off the credentials of former colleague "Speedy", and will be mulling it all over for two years in jail.

πŸ“– Read

via "Naked Security".
πŸ” Data protection: Top 3 business challenges πŸ”

More than a quarter of businesses experienced irreparable data loss in the past year, according to a Dell EMC survey.

πŸ“– Read

via "Security on TechRepublic".
⚠ Microsoft Windows 7 patch warns of coming patchocalypse ⚠

Microsoft has issued a patch to remind Windows 7 users that they’ll soon have no patches.

πŸ“– Read

via "Naked Security".
πŸ” Windows 10 DHCP vulnerability allows for remote code execution πŸ”

The vulnerability in Windows 10 and Windows Server 2019 gives attackers an entry point for further exploitation when combined with other vulnerabilities.

πŸ“– Read

via "Security on TechRepublic".
⚠ BitLocker hacked? Disk encryption – and why you still need it [VIDEO] ⚠

Is BitLocker cracked? Is disk encryption still worth it? The answers are "No" and "Yes", and here's why.

πŸ“– Read

via "Naked Security".
πŸ•΄ Security Lessons from My Game Closet πŸ•΄

In an era of popular video games like Fortnite and Minecraft, there is a lot to be learned about risk, luck, and strategy from some old-fashioned board games.

πŸ“– Read

via "Dark Reading: ".
❌ Medtronic Defibrillators Have Critical Flaws, Warns DHS ❌

The unpatched vulnerabilities exist in 20 products made by the popular Medtronics medical device manufacturer, including defibrillators and home patient monitoring systems.

πŸ“– Read

via "Threatpost".
πŸ” Friday Five: 3/22 Edition πŸ”

Looking back at last year's 230M person breach, Facebook's latest privacy slipup, and more - catch up on the week's infosec news with this roundup!

πŸ“– Read

via "Subscriber Blog RSS Feed ".
πŸ” Facebook data privacy scandal: A cheat sheet πŸ”

Read about the saga of Facebook's failures in ensuring privacy for user data, including how it relates to Cambridge Analytica, the GDPR, the Brexit campaign, and the 2016 US presidential election.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Two Found Guilty in Online Dating, BEC Scheme πŸ•΄

Cybercriminals involved in the operation created fake online dating profiles and tricked victims into sending money to phony bank accounts.

πŸ“– Read

via "Dark Reading: ".
❌ Analysis: Drone Tech Creates New Type of Blended Threat ❌

Hacked drones are breaching physical and cyberdefenses to cause disruption and steal data, experts warn.

πŸ“– Read

via "Threatpost".