🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
NIST tool boosts chances of finding dangerous software flaws

NIST thinks it has reached an important milestone in complex software testing with something called Combinatorial Coverage Measurement (CCM).

📖 Read

via "Naked Security".
🕴 Learn to Defend Against HTTP Desync Attacks at Black Hat USA 🕴

Save the Date: Black Hat USA returns to the Mandalay Bay in Las Vegas August 3-8.

📖 Read

via "Dark Reading: ".
🔐 Risk management tips from the SBA and NIST every small-business owner should read 🔐

Shifting cybersecurity from a defensive posture to one of managing risk is becoming more important for small-business owners. Here's must-read risk-management guidance.

📖 Read

via "Security on TechRepublic".
🔐 Half of companies have 1,000+ sensitive files accessible to every employee 🔐

Post-GDPR, businesses are still failing to adequately protect sensitive data, according to a Varonis report.

📖 Read

via "Security on TechRepublic".
🔐 75% of people are stressed about remembering passwords 🔐

Two-thirds of consumers say having their bank accounts compromised would be more stressful than losing their job, according to a Kaspersky report.

📖 Read

via "Security on TechRepublic".
2 Million IoT Devices Vulnerable to Complete Takeover

Millions of security cameras, baby monitors and "smart" doorbells are open to hijack - and no solution is currently available.

📖 Read

via "Threatpost".
🔏 BEC Scams Responsible for $1.2B in Losses in 2018 🔏

It sounds like business email compromise attacks, attacks that rely on tricking recipients, usually executives, into conducting wire transfers, aren't going away anytime soon.

📖 Read

via "Subscriber Blog RSS Feed ".
Docker Hub Hack Affects 190K Accounts

Github and Bitbucket tokens for Docker autobuilds are also impacted.

📖 Read

via "Threatpost".
🕴 A Rear-View Look at GDPR: Compliance Has No Brakes 🕴

With a year of Europe's General Data Protection Regulation under our belt, what have we learned?

📖 Read

via "Dark Reading: ".
🔐 Why marketing teams are critical to successful cybersecurity efforts 🔐

Marketers often focus on cybersecurity best practices after there is an incident, though experts say that needs to change to improve a company's chances of surviving a cyberattack.

📖 Read

via "Security on TechRepublic".
🔐 Can password managers protect you from hackers? 🔐

Microsoft Identity Division's corporate vice president of program management Alex Simons sat down with Dan Patterson to discuss the different threats facing the enterprise today.

📖 Read

via "Security on TechRepublic".
🔐 Can password managers protect you from hackers? 🔐

Microsoft Identity Division's corporate vice president of program management Alex Simons sat down with Dan Patterson to discuss the different threats facing the enterprise today.

📖 Read

via "Security on TechRepublic".
ATENTION New - CVE-2018-12384

When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2016-10749

parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2015-9285

esoTalk 1.0.0g4 has XSS via the PATH_INFO to the conversations/ URI.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2015-1343 (ubuntu_linux)

All versions of unity-scope-gdrive logs search terms to syslog.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2015-1341 (apport, ubuntu_linux)

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Appoprt before 2.19.2 function _python_module_path.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2015-1340 (lxd)

LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.

📖 Read

via "National Vulnerability Database".
🔐 How the cloud is evolving to improve enterprise security 🔐

Microsoft's executive vice president Jason Zander sat down with Dan Patterson to discuss cloud migration and how it benefits security in the enterprise.

📖 Read

via "Security on TechRepublic".
🔐 Why real-estate businesses need to defend against these cybersecurity threats 🔐

BEC scams, ransomware, and malware are some of the cybersecurity threats that cybercriminals use against real-estate agencies. Here's security advice, including scam prevention tips from the FBI.

📖 Read

via "Security on TechRepublic".
🔐 How the cloud is evolving to improve enterprise security 🔐

Microsoft's executive vice president Jason Zander sat down with Dan Patterson to discuss cloud migration and how it benefits security in the enterprise.

📖 Read

via "Security on TechRepublic".