πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ” How to completely and securely delete files in Windows πŸ”

To make sure a deleted file can't be recovered, you'll need to use a third-party shredding tool. Here's a look at three such free programs: Eraser, File Shredder, and Freeraser.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Phishing Campaign Targeting Verizon Mobile Users πŸ•΄

Lookout Phishing AI, which discovered the attack, says it has been going on since late November.

πŸ“– Read

via "Dark Reading: ".
❌ Cisco Finally Patches Routers Bugs As New Unpatched Flaws Surface ❌

Cisco repatched its RV320 and RV325 routers against two high-severity vulnerabilities, but at the same time reported two new medium-severity bugs with no fixes.

πŸ“– Read

via "Threatpost".
❌ Podcast: Chris Vickery on UpGuard’s Discovery of Millions of Facebook Records ❌

Chris Vickery with UpGuard, who discovered two datasets exposing millions of Facebook records, discusses his findings and the implications of data collection with Threatpost.

πŸ“– Read

via "Threatpost".
⚠ Monday review – the hot 25 stories of the week ⚠

From a Russian GPS spoofing campaign to the Facebook apps leaking millions of records - it's weekly roundup time.

πŸ“– Read

via "Naked Security".
❌ SAS 2019: Exodus Spyware Found Targeting Apple iOS Users ❌

The surveillance tool was signed with legitimate Apple developer certificates.

πŸ“– Read

via "Threatpost".
⚠ Myspace songs come back from the dead ⚠

It's fewer than 1% of the 50 million songs and videos Myspace lost, but hey, it's better than nothing!

πŸ“– Read

via "Naked Security".
⚠ Firefox draws battle lines against push notification spam ⚠

Mozilla doesn’t yet know how to solve the problem of website push notification spam in the Firefox browser, but it’s working on it.

πŸ“– Read

via "Naked Security".
⚠ Microsoft lets Windows users off the update leash ⚠

Microsoft has announced some big changes that will finally give Windows users more control over updates and releases.

πŸ“– Read

via "Naked Security".
πŸ•΄ Ignore the Insider Threat at Your Peril πŸ•΄

Attacks from insiders often go undiscovered for months or years, so the potential impact can be huge. These 11 countermeasures can mitigate the damage.

πŸ“– Read

via "Dark Reading: ".
⚠ Bootstrap supply chain attack is another attempt to poison the barrel ⚠

Somebody smuggled something bad into the vast third-party, open-source supply chain we all depend upon.

πŸ“– Read

via "Naked Security".
ATENTIONβ€Ό New - CVE-2016-10745

In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.

πŸ“– Read

via "National Vulnerability Database".
πŸ” How to protect your business from tax fraud πŸ”

With the April 15th filing deadline around the corner, cybercriminals are counting on a rushed response to questions to infect potential victims.

πŸ“– Read

via "Security on TechRepublic".
❌ Spam Campaigns Spread TrickBot Malware with Tax Lure ❌

Three recent spam campaigns are pretending to be from ADP and Paychex; in reality, the malicious emails are spreading the TrickBot trojan.

πŸ“– Read

via "Threatpost".
ATENTIONβ€Ό New - CVE-2017-7912

Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to SRN4000_v2.16_170401, A specially crafted http request and response could allow an attacker to gain access to the device management page with admin privileges without proper authentication.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2014-9186

A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to accepting an arbitrary file into the function, and potential information disclosure or remote code execution. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2014-5436

A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to possible information disclosure. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2014-5435

An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Microsoft Products Under EU Investigation About Data Collection πŸ•΄

A new inquiry aims to determine whether contracts between Microsoft and EU organizations violate GDPR.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ 8 Steps to More Effective Small Business Security πŸ•΄

Small business face the same security challenges as large enterprises but with much smaller security teams. Here are 8 things to do to get the most from yours.

πŸ“– Read

via "Dark Reading: ".
❌ New Mirai Samples Grow the Number of Processors Targets ❌

Researchers said that they discovered new Mirai samples in February 2019, capable of infecting devices powered by a broadened range of processors.

πŸ“– Read

via "Threatpost".