πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
❌ ThreatList: Remote Workers Threaten 1 in 3 Organizations ❌

More than one-third of surveyed organizations (36 percent) said have experienced a security incident because of a remote worker's actions.

πŸ“– Read

via "Threatpost".
ATENTIONβ€Ό New - CVE-2017-7340

A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2014-9189

Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules that could lead to possible remote code execution, dynamic memory corruption, or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2014-9187

Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.

πŸ“– Read

via "National Vulnerability Database".
πŸ” One reason why you shouldn't allow your web browser to save your passwords πŸ”

Jack Wallen explains why you should never allow your web browser to save passwords--and what you should do instead.

πŸ“– Read

via "Security on TechRepublic".
ATENTIONβ€Ό New - CVE-2017-7342

A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Pwn2Own: Tesla Hack, Broken VMs, and Skewed Economics πŸ•΄

In the latest Pwn2Own vulnerability throwdown at the CanSecWest conference, two researchers walk away with the lion's share of rewards-just like the real marketplace.

πŸ“– Read

via "Dark Reading: ".
⚠ Family tracking app spilled pics, names and real-time location data ⚠

A journalist/researcher team got a sensitive database taken down after the vendor responsible failed to acknowledge a problem.

πŸ“– Read

via "Naked Security".
⚠ Tech giants back bill that privacy advocates claim is toothless ⚠

The main disagreement: if consumers will be able to delete their data or whether the law would give companies ways to wiggle out.

πŸ“– Read

via "Naked Security".
⚠ FEMA exposes sensitive data of 2.5 million disaster survivors ⚠

The agency said it exposed 2.3m people's details in a β€œmajor privacy incident” involving a contractor that set up temporary housing.

πŸ“– Read

via "Naked Security".
πŸ” Why data security is now a top concern for IT leaders πŸ”

The ability to use artificial intelligence effectively is also a large concern for IT decision makers.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Ex-NSA Director Rogers: Insider Threat Prevention a 'Contract' πŸ•΄

Ret. Admiral Michael Rogers - who served as head of the NSA and the US Cyber Command from 2014 to 2018 - on how to handle the risk of insiders exposing an organization's sensitive data.

πŸ“– Read

via "Dark Reading: ".
πŸ” 5 IT security roles businesses are most desperate to fill πŸ”

Organizations are facing more difficulty filling security roles now than in previous years, according to a CyberEdge report.

πŸ“– Read

via "Security on TechRepublic".
❌ Apple iOS 12.2 Patches 51 Serious Flaws ❌

Apple patched more than 50 flaws in iOS 12.2, including an array of bugs in Webkit and a vulnerability that allows apps to secretly listen to users.

πŸ“– Read

via "Threatpost".
πŸ” Top Tips for Improving Board Communication Around Security πŸ”

A panel of security professionals discuss the the top three tips for how CISOs and risk officers can help improve board communication around security

πŸ“– Read

via "Subscriber Blog RSS Feed ".
πŸ•΄ Under Attack: Over Half of SMBs Breached Last Year πŸ•΄

Many small and midsize businesses work faster and harder than large enterprises, but they're just as vulnerable to cybercrime.

πŸ“– Read

via "Dark Reading: ".
⚠ Apple patches 51 security flaws with iOS 12.2 update ⚠

Apple's update patches 51 iOS holes, the more serious of which include bugs in Safari, Keychain and FaceTime.

πŸ“– Read

via "Naked Security".
πŸ” Android Security Bulletin March 2019: What you need to know πŸ”

Another month is here and Android finds itself with a mixture of Critical and High vulnerabilities.

πŸ“– Read

via "Security on TechRepublic".
❌ ASUS Patches Live Update Bug That Allowed APT to Infect Thousands of PCs ❌

If users have an impacted devices, they need to immediately run a backup of their files and restore their operating system to factory settings, said ASUS

πŸ“– Read

via "Threatpost".
ATENTIONβ€Ό New - CVE-2014-5434

Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.

πŸ“– Read

via "National Vulnerability Database".
πŸ” What criminals can find out about you on the Dark Web πŸ”

Graham Kates, investigative reporter, shares the types of data cybercriminals can look up about anyone on the Dark Web.

πŸ“– Read

via "Security on TechRepublic".