πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“’ IOC defends China Olympics app after 'devastating flaw' revealed πŸ“’

The app may even be breaking Google and Apple’s app store policies when it comes to privacy, according to Citizen Lab

πŸ“– Read

via "ITPro".
πŸ“’ NCA plots education drive to crack down on children exploring cyber crime πŸ“’

With children as young as nine being referred to the NCA for launching DDoS attacks, the new campaign aims to educate children in the consequences of cyber crime

πŸ“– Read

via "ITPro".
πŸ“’ A month in the life of a social engineer - part three πŸ“’

With the master plan now well underway, we learn how the hacker exploits their target's β€˜unpatchable’ human flaws to gain access to corporate systems

πŸ“– Read

via "ITPro".
πŸ“’ Skills 'deficit' forces Student Loans Company to spend heavily on temp staff πŸ“’

The organisation has spent Β£2.6 million on agency staff as it struggles to retain technical employees

πŸ“– Read

via "ITPro".
πŸ“’ Microsoft warns full scope of Ukraine cyber attacks β€˜not fully realised’ πŸ“’

The company's investigation into the attacks targeting Ukraine revealed atypical characteristics of the "destructive" campaign that disguises itself as ransomware

πŸ“– Read

via "ITPro".
πŸ“’ The UK's IoT proposals are riddled with β€˜astonishing’ gaps πŸ“’

The Product Security and Telecommunications Infrastructure (PTSI) Bill aims to address the connected devices security nightmare, but experts agree it doesn’t go far enough

πŸ“– Read

via "ITPro".
πŸ“’ Windows Server admins agree to forgo broken patches πŸ“’

Many administrators have agreed to wait until February's round of patches to avoid operational disruption caused by broken fixes

πŸ“– Read

via "ITPro".
πŸ“’ Russia's "politically motivated" REvil raid could be used as leverage, experts warn πŸ“’

The cyber security industry says the FSB's arrests are β€œunlikely” to signal a change in Russia’s policy

πŸ“– Read

via "ITPro".
πŸ“’ FireEye and McAfee Enterprise relaunch as Trellix πŸ“’

The new pure-play cyber security firm’s platform combines automation, machine learning, and threat intelligence

πŸ“– Read

via "ITPro".
πŸ“’ White House issues memorandum to bolster national security systems πŸ“’

Agencies must now implement multi-factor authentication within 180 days, along with encryption for data at rest and in transit

πŸ“– Read

via "ITPro".
πŸ“’ Red Cross "appalled" by data breach targeting 515,000 vulnerable people πŸ“’

The charitable organisation has begged cyber attackers not to leak the data online in emotional plea

πŸ“– Read

via "ITPro".
πŸ“’ DHL overtakes Microsoft as the most imitated brand in phishing attacks πŸ“’

Check Point Research reveals that the logistics giant accounted for almost a quarter of global phishing attacks in 2021

πŸ“– Read

via "ITPro".
πŸ“’ UK and Australia partner on cyber security investment πŸ“’

The countries are set to invest in infrastructure for Indo-Pacific states as well, in the areas of energy, investment, and technology

πŸ“– Read

via "ITPro".
πŸ“’ Ransomware: Why only the bravest businesses will survive πŸ“’

With ransomware attacks a matter of when, not if, the secret to protecting your reputation lies in honesty and transparency

πŸ“– Read

via "ITPro".
πŸ“’ NordVPN launches open source VPN speed testing tool πŸ“’

The unified speed-testing software can be downloaded from GitHub

πŸ“– Read

via "ITPro".
πŸ“’ The government’s anti-encryption campaign shows it’s learned nothing from the war on drugs πŸ“’

Criminalisation has almost always backfired through history, pushing illicit materials further into the hands of criminals

πŸ“– Read

via "ITPro".
β€Ό CVE-2022-21933 β€Ό

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-0326 β€Ό

NULL Pointer Dereference in Homebrew mruby prior to 3.2.

πŸ“– Read

via "National Vulnerability Database".
πŸ—“οΈ BitLocker encryption: Clear text key storage prompts security debate online πŸ—“οΈ

Many are questioning why keys are saved in the clear ahead of sign-in

πŸ“– Read

via "The Daily Swig".
β€Ό CVE-2022-0318 β€Ό

Heap-based Buffer Overflow in Conda vim prior to 8.2.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-0329 β€Ό

Code Injection in Conda loguru prior to master.

πŸ“– Read

via "National Vulnerability Database".