ATENTION‼ New - CVE-2017-16558
📖 Read
via "National Vulnerability Database".
Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the listing module.📖 Read
via "National Vulnerability Database".
🕴 55% of SMBs Would Pay Up Post-Ransomware Attack 🕴
📖 Read
via "Dark Reading: ".
The number gets even higher among larger SMBs.📖 Read
via "Dark Reading: ".
Darkreading
55% of SMBs Would Pay Up Post-Ransomware Attack
The number gets even higher among larger SMBs.
🕴 UVA Wins Second Consecutive National Collegiate Cyber Defense Championship 🕴
📖 Read
via "Dark Reading: ".
The Wahoos came out on top among 235 colleges and universities that took part in the 15-year-old competition.📖 Read
via "Dark Reading: ".
Darkreading
UVA Wins Second Consecutive National Collegiate Cyber Defense Championship
The Wahoos came out on top among 235 colleges and universities that took part in the 15-year-old competition.
ATENTION‼ New - CVE-2018-1360
📖 Read
via "National Vulnerability Database".
A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-12244
📖 Read
via "National Vulnerability Database".
SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files.📖 Read
via "National Vulnerability Database".
❌ Android-Based Sony Smart-TVs Open to Image Pilfering ❌
📖 Read
via "Threatpost".
A pair of bugs would allow attackers to compromise the WiFi password of a TV and the multimedia stored inside it.📖 Read
via "Threatpost".
Threat Post
Android-Based Sony Smart-TVs Open to Image Pilfering
A pair of bugs would allow attackers to compromise the WiFi password of a TV and the multimedia stored inside it.
🕴 Cyberattackers Focus on More Subtle Techniques 🕴
📖 Read
via "Dark Reading: ".
Spam has given way to spear phishing, cryptojacking remains popular, and credential spraying is on the rise.📖 Read
via "Dark Reading: ".
Darkreading
Cyberattackers Focus on More Subtle Techniques
Spam has given way to spear phishing, cryptojacking remains popular, and credential spraying is on the rise.
🕴 New EternalBlue Family Member Takes Aim at Asian Web Servers 🕴
📖 Read
via "Dark Reading: ".
Beapy is a new malware variant that's storming across China, leaving cryptominers in its wake.📖 Read
via "Dark Reading: ".
Darkreading
New EternalBlue Family Member Takes Aim at Asian Web Servers
Beapy is a new malware variant that's storming across China, leaving cryptominers in its wake.
🕴 Security Vulns in Microsoft Products Continue to Increase 🕴
📖 Read
via "Dark Reading: ".
The good news: Removing admin privileges can mitigate most of them, a new study by BeyondTrust shows.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
⚠ Cops can try suspect’s fingers on locked iPhones found at crime scene ⚠
📖 Read
via "Naked Security".
A Massachusetts federal district judge gave cops a warrant to force-unlock iPhones with the suspect's fingers.📖 Read
via "Naked Security".
Naked Security
Cops can try suspect’s fingers on locked iPhones found at crime scene
A Massachusetts federal district judge gave cops a warrant to force-unlock iPhones with the suspect’s fingers.
⚠ Microsoft drops password expiration from Windows 10 security ⚠
📖 Read
via "Naked Security".
Microsoft has recognised that users don't actually change their passwords when prompted, they just tweak them. And that doesn't help anyone.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Fingerprint glitch in passports swapped left and right hands ⚠
📖 Read
via "Naked Security".
And just who, exactly, is going to pay for new passports if it's necessary? Danish police are chatting with Kube Data about that.📖 Read
via "Naked Security".
Naked Security
Fingerprint glitch in passports swapped left and right hands
And just who, exactly, is going to pay for new passports if it’s necessary? Danish police are chatting with Kube Data about that.
⚠ NSA asks to end mass phone surveillance ⚠
📖 Read
via "Naked Security".
The NSA has asked the White House to end its mass phone surveillance program because the work involved outweighs its intelligence value.📖 Read
via "Naked Security".
Naked Security
NSA asks to end mass phone surveillance
The NSA has asked the White House to end its mass phone surveillance program because the work involved outweighs its intelligence value.
❌ Facial Recognition ‘Consent’ Doesn’t Exist, Threatpost Poll Finds ❌
📖 Read
via "Threatpost".
Half of Threatpost readers surveyed in a recent poll don't believe that consent realistically exists when it comes to facial recognition.📖 Read
via "Threatpost".
Threat Post
Facial Recognition ‘Consent’ Doesn’t Exist, Threatpost Poll Finds
Half of Threatpost readers surveyed in a recent poll don't believe that consent realistically exists when it comes to facial recognition.
🕴 Go Medieval to Keep OT Safe 🕴
📖 Read
via "Dark Reading: ".
When it comes to operational technology and industrial control systems, make sure you're the lord of all you survey.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
❌ Critical Flaws in Sierra Wireless 5G Gateway Allow RCE, Command Injection ❌
📖 Read
via "Threatpost".
A 5G wireless gateway tailored for industrial internet of things (IoT), retail point-of-sale and enterprise redundancy applications is riddled with vulnerabilities, include two critical bugs that allow remote code-execution (RCE) and arbitrary command-injection. The Sierra Wireless AirLink ES450 LTE gateway (version 4.9.3) has 11 different bugs, which could be exploited for RCE, uncovering user credentials […]📖 Read
via "Threatpost".
Threat Post
Critical Flaws in Sierra Wireless 5G Gateway Allow RCE, Command Injection
The wireless gateways are used in PoS, industrial IoT and distributed enterprise settings.
🔏 Friday Five: 4/26 Edition 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
A new phishing scam asking for selfies,embedding malware in video games, and the latest IoT vulnerability are all covered in this week's Friday Five.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five: 4/26 Edition
A new phishing scam asking for selfies,embedding malware in video games, and the latest IoT vulnerability are all covered in this week's Friday Five.
ATENTION‼ New - CVE-2015-9284
📖 Read
via "National Vulnerability Database".
The request phase of the OmniAuth Ruby gem is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.📖 Read
via "National Vulnerability Database".
🔐 Widespread scam campaigns targeting millions uncovered by GoDaddy and Palo Alto Networks 🔐
📖 Read
via "Security on TechRepublic".
A research team found that thousands of websites were tricking users into entering credit card information by spoofing trustworthy sites.📖 Read
via "Security on TechRepublic".
TechRepublic
Widespread scam campaigns targeting millions uncovered by GoDaddy and Palo Alto Networks
A research team found that thousands of websites were tricking users into entering credit card information by spoofing trustworthy sites.
🔐 How to manage user passwords with Group Policy 🔐
📖 Read
via "Security on TechRepublic".
You can enforce various policies to make sure your users meet certain requirements with their Windows passwords. Learn about some of the password-related settings in Group Policy.📖 Read
via "Security on TechRepublic".
TechRepublic
How to manage your users' Windows passwords with Group Policy
You can enforce various policies to make sure your users meet certain requirements with their Windows passwords. Learn about some of the password-related settings in Group Policy.
❌ GoDaddy Shutters 14,000 Subdomains Tied to ‘Snake Oil’ Scams ❌
📖 Read
via "Threatpost".
GoDaddy worked with researchers to shut down 15,000 domain-shadowing websites tied to bogus affiliate marketing offers promoted via spam campaigns.📖 Read
via "Threatpost".
Threat Post
GoDaddy Shutters 15,000 Subdomains Tied to ‘Snake Oil’ Scams
GoDaddy works with researchers to shut down 15,000 websites tied to 'snake oil' affiliate marketing offers promoted via spam campaigns.