πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΄ Known macOS Vulnerabilities Led Researcher to Root Out New Flaws πŸ•΄

Researcher shares how he unearthed newer bugs in Apple's operating system by closer scrutiny of previous research, including vulnerabilities that came out of the Pwn2Own competition.

πŸ“– Read

via "Dark Reading".
❌ Malware Builder Leverages Discord Webhooks ❌

Researchers discovered a simple malware builder designed to steal credentials, then pinging them to Discord webhooks.

πŸ“– Read

via "Threat Post".
πŸ•΄ How Can Your Business Defend Itself Against Fraud-as-a-Service? πŸ•΄

By understanding how FaaS works and following best practices to prevent it, your business can protect its customers, revenue, and brand reputation.

πŸ“– Read

via "Dark Reading".
πŸ—“οΈ Researcher stops REvil ransomware in its tracks with DLL-hijacking exploit πŸ—“οΈ

Conti, Lockbit, and other prolific ransomware strains apparently have similar vulnerabilities

πŸ“– Read

via "The Daily Swig".
β€Ό CVE-2021-42863 β€Ό

A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake arraybuffer with unlimited size.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-28873 β€Ό

A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-28872 β€Ό

A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop.

πŸ“– Read

via "National Vulnerability Database".
πŸ—“οΈ Marcus Hutchins on halting the WannaCry ransomware attack – β€˜Still to this day it feels like it was all a weird dream’ πŸ—“οΈ

Five years since WannaCry exploded onto the scene, ransomware still tops global threat lists ANALYSIS Five years ago today (May 12), a ransomware attack by a North Korean hacking group hit computers r

πŸ“– Read

via "The Daily Swig".
⚠ Serious Security: Learning from curl’s latest bug update ⚠

Learn how to write plain-speaking and purposeful security advisories from one of the most widely-used open source tools in the world.

πŸ“– Read

via "Naked Security".
⚠ S3 Ep82: Bugs, bugs, bugs (and Colonial Pipeline again) [Podcast] ⚠

Latest episode - lots to learn - plain English - fun with a serious side - listen now!

πŸ“– Read

via "Naked Security".
β€Ό CVE-2022-29989 β€Ό

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-29982 β€Ό

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-29751 β€Ό

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-29992 β€Ό

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-29980 β€Ό

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-29986 β€Ό

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-29988 β€Ό

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-29983 β€Ό

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-29995 β€Ό

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-29981 β€Ό

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-29987 β€Ό

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=.

πŸ“– Read

via "National Vulnerability Database".