⚠ Monday review – the hot 18 stories of the week ⚠
📖 Read
via "Naked Security".
From spying Airbnb creeps to the CSS trick that tracks your mouse movements - and everything in between. It's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 18 stories of the week
From spying Airbnb creeps to the CSS trick that tracks your mouse movements – and everything in between. It’s weekly roundup time.
⚠ Break up Facebook, cofounder says: it’s an un-American monopoly ⚠
📖 Read
via "Naked Security".
During the 2018 "annus horribilis", users disgusted at privacy flops swore to dump Facebook. But where else is there to go?📖 Read
via "Naked Security".
Naked Security
Break up Facebook, cofounder says: it’s an un-American monopoly
During the 2018 “annus horribilis”, users disgusted at privacy flops swore to dump Facebook. But where else is there to go?
⚠ Study finds Android smartphones riddled with suspect ‘bloatware’ ⚠
📖 Read
via "Naked Security".
According to a new study, Android bloatware can create hidden security and privacy risks.📖 Read
via "Naked Security".
Naked Security
Study finds Android smartphones riddled with suspect ‘bloatware’
According to a new study, Android bloatware can create hidden security and privacy risks.
⚠ Two Chinese hackers indicted for massive Anthem breach ⚠
📖 Read
via "Naked Security".
They're part of a gang that spearphished millions of records out of the health insurer and other businesses, the DOJ says.📖 Read
via "Naked Security".
Naked Security
Two people indicted for massive Anthem health data breach
They’re part of a gang that spearphished millions of records out of the health insurer and other businesses, the DOJ says.
🔐 Top 5 challenges keeping IT pros up at night 🔐
📖 Read
via "Security on TechRepublic".
IT professionals face a slew of concerns in today's connected ecosystem, according to an Insight Enterprises report.📖 Read
via "Security on TechRepublic".
TechRepublic
Top 5 challenges keeping IT pros up at night
IT professionals face a slew of concerns in today's connected ecosystem, according to an Insight Enterprises report.
ATENTION‼ New - CVE-2018-12303
📖 Read
via "National Vulnerability Database".
Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via directory names.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-12302
📖 Read
via "National Vulnerability Database".
Missing HTTPOnly flag on session cookies in the Seagate NAS OS version 4.3.15.1 web application allows attackers to steal session tokens via cross-site scripting.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-12301
📖 Read
via "National Vulnerability Database".
Unvalidated URL in Download Manager in Seagate NAS OS version 4.3.15.1 allows attackers to access the loopback interface via a Download URL of 127.0.0.1 or localhost.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-12300
📖 Read
via "National Vulnerability Database".
Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to disclose information in the Referer header via the 'state' URL parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-12299
📖 Read
via "National Vulnerability Database".
Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via uploaded file names.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-12298
📖 Read
via "National Vulnerability Database".
Directory Traversal in filebrowser in Seagate NAS OS 4.3.15.1 allows attackers to read files within the application's container via a URL path.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-12297
📖 Read
via "National Vulnerability Database".
Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-12296
📖 Read
via "National Vulnerability Database".
Insufficient access control in /api/external/7.0/system.System.get_infos in Seagate NAS OS version 4.3.15.1 allows attackers to obtain information about the NAS without authentication via empty POST requests.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-12295
📖 Read
via "National Vulnerability Database".
SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter.📖 Read
via "National Vulnerability Database".
🕴 How Open Testing Standards Can Improve Security 🕴
📖 Read
via "Dark Reading: ".
When creating security metrics, it's critical that test methodologies cover multiple scenarios to ensure that devices perform as expected in all environments.📖 Read
via "Dark Reading: ".
Dark Reading
How Open Testing Standards Can Improve Security
When creating security metrics, it's critical that test methodologies cover multiple scenarios to ensure that devices perform as expected in all environments.
🔐 How to use SFTP with a chroot jail 🔐
📖 Read
via "Security on TechRepublic".
Lock down all SFTP users on your data center Linux servers with a chroot jail.📖 Read
via "Security on TechRepublic".
TechRepublic
How to use SFTP with a chroot jail
Lock down all SFTP users on your data center Linux servers with a chroot jail.
ATENTION‼ New - CVE-2012-6652
📖 Read
via "National Vulnerability Database".
Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress (wppageflip) allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pageflipbook_language parameter.📖 Read
via "National Vulnerability Database".
❌ ThreatList: Top 5 Most Dangerous Attachment Types ❌
📖 Read
via "Threatpost".
From ZIP attachments spreading Gandcrab, to DOC files distributing Trickbot, researchers tracked five widescale spam campaigns in 2019 that have made use of malicious attachments.📖 Read
via "Threatpost".
Threat Post
ThreatList: Top 5 Most Dangerous Attachment Types
From ZIP attachments spreading Gandcrab, to DOC files distributing Trickbot, researchers tracked five widescale spam campaigns in 2019 that have made use of malicious attachments.
❌ ScarCruft APT Adds Bluetooth Harvester to its Malware Bag of Tricks ❌
📖 Read
via "Threatpost".
In its latest observed campaign, there were also overlaps in victimology with the DarkHotel APT.📖 Read
via "Threatpost".
Threat Post
ScarCruft APT Adds Bluetooth Harvester to its Malware Bag of Tricks
In its latest observed campaign, there were also overlaps in victimology with the DarkHotel APT.
🕴 78% of Consumers Say Online Companies Must Protect Their Info 🕴
📖 Read
via "Dark Reading: ".
Yet 68% of US consumers agree they also must do more to protect their own information.📖 Read
via "Dark Reading: ".
Dark Reading
78% of Consumers Say Online Companies Must Protect Their Info
Yet 68% of US consumers agree they also must do more to protect their own information.
🕴 Poorly Configured Server Exposes Most Panama Citizens' Data 🕴
📖 Read
via "Dark Reading: ".
Compromised information includes full names, birth dates, national ID numbers, medical insurance numbers, and other personal data.📖 Read
via "Dark Reading: ".
Dark Reading
Poorly Configured Server Exposes Most Panama Citizens' Data
Compromised information includes full names, birth dates, national ID numbers, medical insurance numbers, and other personal data.