πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ” Breaking Down Singapore's New Data Protection Trustmark Certification πŸ”

A new certification, launched by a division of the country's government this week, is designed to help organizations demonstrate "accountable and responsible data protection practices."

πŸ“– Read

via "Subscriber Blog RSS Feed ".
πŸ•΄ 87% of Cloud Pros Say Visibility Masks Security πŸ•΄

The majority of cloud IT professionals find a direct link between network visibility and business value, new data shows.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2016-9166 (netiq_edirectory)

NetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to downgrade of communication security.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ New Shodan Tool Warns Organizations of Their Internet-Exposed Devices πŸ•΄

Shodan Monitor is free to members of the popular Internet search engine.

πŸ“– Read

via "Dark Reading: ".
❌ FTC Demands Broadband Providers Reveal Data Handling Practices ❌

The FTC is ordering seven companies - including AT&T, T-Mobile, Comcast and more - to outline what data they collect, what they use the data for, and how transparent they're being with consumers.

πŸ“– Read

via "Threatpost".
❌ Cisco Releases Flood of Patches for IOS XE and Small Business Routers ❌

The networking giant issued 27 patches impacting a wide range of its products running the ISO XE software.

πŸ“– Read

via "Threatpost".
πŸ•΄ 6 Things To Know About the Ransomware That Hit Norsk Hydro πŸ•΄

In just one week, 'LockerGoga' has cost the Norwegian aluminum maker $40 million as it struggles to recover operations across Europe and North America.

πŸ“– Read

via "Dark Reading: ".
πŸ” Apple Pay: A cheat sheet πŸ”

Apple Pay is a mobile payment solution that's accepted by millions of retailers in various countries. This guide covers what you need to know to use Apple Pay.

πŸ“– Read

via "Security on TechRepublic".
ATENTIONβ€Ό New - CVE-2017-18365

The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. This occurs because the enterprise session secret is always the same, and can be found in the product's source code. By sending a crafted cookie signed with this secret, one can call Marshal.load with arbitrary data, which is a problem because the Marshal data format allows Ruby objects.

πŸ“– Read

via "National Vulnerability Database".
⚠ Firefox brings Lockbox password manager to Android’s autofill ⚠

All your saved Firefox passwords, now happily inserting themselves into your Android-verse!

πŸ“– Read

via "Naked Security".
⚠ Broadband providers told to explain how they handle consumer data ⚠

The FTC launched a broad inquiry to find out what data they collect, why, who they share it with, and how consumers can change or delete it.

πŸ“– Read

via "Naked Security".
πŸ•΄ Inside Cyber Battlefields, the Newest Domain of War πŸ•΄

In his Black Hat Asia keynote, Mikko Hypponen explored implications of "the next arms race" and why cyber will present challenges never before seen in warfare.

πŸ“– Read

via "Dark Reading: ".
⚠ Spyware app exposes private photos, hosting provider steps in ⚠

A hosting company has taken down a database owned by a mobile spying app after it was found displaying phone owners' intimate images online.

πŸ“– Read

via "Naked Security".
πŸ” Is crowdsourcing cybersecurity the answer to CISOs' problems? πŸ”

More than half of organizations now run bug bounty and other crowdsourced options to avoid data breaches, according to a Bugcrowd report.

πŸ“– Read

via "Security on TechRepublic".
πŸ” Employee mistakes and system errors are a larger threat to data security than hackers or insiders πŸ”

Employee mistakes were ranked as the highest risk in the 2019 Global Encryption Trends Study, though employee-owned devices on company networks deserve more security scrutiny.

πŸ“– Read

via "Security on TechRepublic".
πŸ” Why you should never allow your web browser to save your passwords πŸ”

When a web browser like Chrome, Firefox or Safari is allowed to store passwords, you're putting your network security at risk.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Tidying Expert Marie Kondo: Cybersecurity Guru? πŸ•΄

The "KonMari" method of decluttering can be a huge step toward greater security, according to a growing number of executives.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Everything I Needed to Know About Third-Party Risk Management, I Learned from Meet the Parents πŸ•΄

How much do you trust your vendors? You don't have to hook them up to a polygraph machine because there are better ways to establish trust.

πŸ“– Read

via "Dark Reading: ".
❌ Gamers Urged to Patch Critical Bugs in GOG Galaxy ❌

Video game digital distribution platform GOG Galaxy Games has patched two critical privilege escalation flaws that could allow arbitrary code execution.

πŸ“– Read

via "Threatpost".
⚠ Is your e-commerce site being used to test stolen card data? ⚠

If you're running Magento you should be on the look out for hackers testing stolen card data - it could get your PayPal account suspended.

πŸ“– Read

via "Naked Security".
⚠ β€œTwitter 2007 multicolor” hoax – debunk it, don’t spread it! ⚠

Hoaxers are saying you can unlock colorful new "features" in Twitter, but you'll probably lock yourself out instead.

πŸ“– Read

via "Naked Security".