πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΄ Four Out of Five Organizations Are Increasing Cybersecurity Budgets for 2022 πŸ•΄

Half of security decision makers also say the cyber skills gap will significantly impact their 2022 strategy, according to new research from Neustar.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Reblaze Appoints New CEO πŸ•΄

Ziv Oren previously held the position of chief operations officer at the company.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Trend Micro Crowns Champions of 2021 Capture the Flag Competition πŸ•΄

Challenges were designed to address critical areas of cybersecurity, including reversing, cloud, IoT, open source intelligence, forensics, and machine learning.

πŸ“– Read

via "Dark Reading".
🦿 Surveillance-for-hire: Are you a target of the booming spy business? 🦿

Meta has exposed and acted against entities that have been spying on people and organizations around the globe. Find out how the threat actors operate and learn what you can do to protect yourself.

πŸ“– Read

via "Tech Republic".
πŸ›  Wapiti Web Application Vulnerability Scanner 3.0.9 πŸ› 

Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities.

πŸ“– Read

via "Packet Storm Security".
πŸ•΄ SecurityScorecard Research Reveals Cyber Vulnerabilities Pose a Threat to U.S. Maritime Security πŸ•΄

While the shipping industry's cyber posture was better than companies in the Forbes Global 2000, the industry performed lower in key risk group factors.

πŸ“– Read

via "Dark Reading".
πŸ•΄ BlackBerry Launches New Managed Extended Detection and Response (XDR) Service πŸ•΄

Company partners with Exabeam to launch update to its BlackBerry Guard managed detection and response (MDR) service.

πŸ“– Read

via "Dark Reading".
πŸ•΄ SAIC Launches Rugged Apps to Provide Secure Commercial Apps to Government Users πŸ•΄

Rugged Apps ensures mobile apps are NIAP-compliant.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2021-44675 β€Ό

Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-44676 β€Ό

Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g., access control details) and modify a few aspects of the application state.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-44525 β€Ό

Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required.

πŸ“– Read

via "National Vulnerability Database".
🦿 Synthetic identity fraud: What is it and why is it harmful? 🦿

Online consumers can do everything right and still become cyber victims. Learn about synthetic identity fraud and why "buyer beware" is not enough.

πŸ“– Read

via "Tech Republic".
πŸ” Banks Will Have 36 Hours to Disclose Cyber Incidents in 2022 πŸ”

Federal banking regulators recently issued a rule around reporting data incidents that’s scheduled to go into effect in April 2022.

πŸ“– Read

via "".
❌ Robocalls More Than Doubled in 2021, Cost Victims $30B ❌

T-Mobile reported blocking 21 billion scam calls during a record-smashing year for robocalls.

πŸ“– Read

via "Threat Post".
πŸ•΄ NetSPI Adds IoT Penetration Testing to its Suite of Offensive Security Services πŸ•΄

Led by IoT security expert Larry Trowell, the IoT pen-testing services focus on securing ATMs, automotive, medical devices, operational technology, and other embedded systems.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Brillio Acquires Cedrus Digital to Strengthen Their Digital Transformation Service Capabilities πŸ•΄

The acquisition of Cedrus Digital, with its consulting-led model and over 150 cloud, data and product engineers, primarily in the United States, will further augment Brillio’s nearshore digital transformation capabilities offered for Fortune 500 clients.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2021-43438 β€Ό

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-43441 β€Ό

An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-19316 β€Ό

OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-43437 β€Ό

In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites are hosted on the same IP address. This is where the Host Header comes in. This header specifies which website should process the HTTP request. The web server uses the value of this header to dispatch the request to the specified website. Each website hosted on the same IP address is called a virtual host. And It's possible to send requests with arbitrary Host Headers to the first virtual host.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-43439 β€Ό

RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely

πŸ“– Read

via "National Vulnerability Database".