🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕴 Financial Firms Scrutinize Third-Party Supplier Risk 🕴

But executives aren't confident in the accuracy of cybersecurity assessment data received from their vendors, a new study shows.

📖 Read

via "Dark Reading: ".
🕴 Aqua Security Closes $62M in Funding 🕴

Aqua Security Closes $62M in Funding

📖 Read

via "Dark Reading: ".
🕴 Aqua Security Closes $62M in Funding 🕴

Aqua Security Closes $62M in Funding

📖 Read

via "Dark Reading: ".
🕴 Georgia Tech Cyberattack Exposes Data of 1.3 Million People 🕴

Names, addresses, Social Security numbers, and birth dates may have been pilfered in the attack.

📖 Read

via "Dark Reading: ".
🔐 Permission bloat on iOS can lead to theft of sensitive data, study says 🔐

Applications requesting access to photos for first-use setup retain that permission unless manually revoked, putting companies at risk, according to a Wandera report.

📖 Read

via "Security on TechRepublic".
OceanLotus APT Uses Steganography to Shroud Payloads

The OceanLotus APT is using two new loaders which use steganography to read their encrypted payloads.

📖 Read

via "Threatpost".
🕴 In Security, Programmers Aren't Perfect 🕴

Software developers and their managers must change their perception of secure coding from being an optional feature to being a requirement that is factored into design from the beginning.

📖 Read

via "Dark Reading: ".
🕴 Chinese National Carries Malware Into Mar-a-Lago 🕴

A Chinese woman arrested for entering the grounds of Mar-a-Lago under false pretenses was carrying electronic equipment holding malware.

📖 Read

via "Dark Reading: ".
How to Maximize the Value of Your Cybersecurity Investment

Maximizing your security investment starts with hiring the right talent, harvesting data, spotting trends in logs and more.

📖 Read

via "Threatpost".
🔐 What is the Dark Web, and why is it so bad if your information is there? 🔐

Emily Wilson, vice president of research at Terbium Labs, discusses why consumers and professionals should be concerned if their data is leaked on the Dark Web.

📖 Read

via "Security on TechRepublic".
Facebook Data of Millions Exposed in Leaky Datasets

Researchers say that two publicly exposed dataset are leaking Facebook data- from user names to plaintext passwords.

📖 Read

via "Threatpost".
🔐 What is the Dark Web, and why is it so bad if your information is there? 🔐

Emily Wilson, vice president of research at Terbium Labs, discusses why consumers and professionals should be concerned if their data is leaked on the Dark Web.

📖 Read

via "Security on TechRepublic".
🔏 Insiders, Data Theft A Threat To Self-Driving Car Tech 🔏

Like many companies developing self-driving car technology, Tesla and its embattled CEO Elon Musk continue to fight data theft within its ranks.

📖 Read

via "Subscriber Blog RSS Feed ".
🕴 Focus on Business Priorities Exposing Companies to Avoidable Cyber-Risk 🕴

Despite the growing sophistication of threats and increase compliance requirements, a high percentage of organizations are continuing to compromise their security.

📖 Read

via "Dark Reading: ".
🔐 How to use SSH as a VPN with sshuttle 🔐

You don't need a VPN server running on a remote host to create a VPN tunnel. With the help of a simple tool, you can create that tunnel with ease. Jack Wallen shows you how.

📖 Read

via "Security on TechRepublic".
ATENTION New - CVE-2017-13911

A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capitan 10.11.6 Security Update 2018-002, macOS Sierra 10.12.6 Security Update 2018-002, macOS High Sierra 10.13.2.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2015-5606

Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted request.

📖 Read

via "National Vulnerability Database".
Nvidia Fixes 8 High-Severity Flaws Allowing DoS, Code Execution

Nvidia has patched eight high-severity flaws in its Tegra processors, which could enable denial of service and code execution.

📖 Read

via "Threatpost".
ATENTION New - CVE-2015-5463

AxiomSL's Axiom java applet module (used for editing uploaded Excel files and associated Java RMI services) 9.5.3 and earlier allows remote attackers to (1) access data of other basic users through arbitrary SQL commands, (2) perform a horizontal and vertical privilege escalation, (3) cause a Denial of Service on global application, or (4) write/read/delete arbitrary files on server hosting the application.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2015-5462

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to inject HTML into the scoping dashboard features.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2015-5384

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack.

📖 Read

via "National Vulnerability Database".