🕴 78% of Consumers Say Online Companies Must Protect Their Info 🕴
📖 Read
via "Dark Reading: ".
Yet 68% of US consumers agree they also must do more to protect their own information.📖 Read
via "Dark Reading: ".
Dark Reading
78% of Consumers Say Online Companies Must Protect Their Info
Yet 68% of US consumers agree they also must do more to protect their own information.
🕴 Poorly Configured Server Exposes Most Panama Citizens' Data 🕴
📖 Read
via "Dark Reading: ".
Compromised information includes full names, birth dates, national ID numbers, medical insurance numbers, and other personal data.📖 Read
via "Dark Reading: ".
Dark Reading
Poorly Configured Server Exposes Most Panama Citizens' Data
Compromised information includes full names, birth dates, national ID numbers, medical insurance numbers, and other personal data.
ATENTION‼ New - CVE-2015-9287
📖 Read
via "National Vulnerability Database".
Directory Traversal was discovered in University of Cambridge mod_ucam_webauth before 2.0.2. The key identification field ("kid") of the IdP's HTTP response message ("WLS-Response") can be manipulated by an attacker. The "kid" field is not signed like the rest of the message, and manipulation is therefore trivial. The "kid" field should only ever represent an integer. However, it is possible to provide any string value. An attacker could use this to their advantage to force the application agent to load the RSA public key required for message integrity checking from an unintended location.📖 Read
via "National Vulnerability Database".
🔏 FTC Backs Federal Privacy Law As Long As It Can Enforce It 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
The FTC told Congress last week that if a national privacy law gets passed, it wants more resources and greater authority to impose penalties under it.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
FTC Backs Federal Privacy Law As Long As It Can Enforce It
The FTC told Congress last week that if a national privacy law gets passed, it wants more resources and greater authority to impose penalties under it.
🕴 Attacks on JavaScript Services Leak Info From Websites 🕴
📖 Read
via "Dark Reading: ".
Three marketing tools, including the Best Of The Web security logomark, were compromised in supply chain attacks, allegedly leaving website customers leaking their users' sensitive information.📖 Read
via "Dark Reading: ".
Darkreading
Attacks on JavaScript Services Leak Info From Websites
Three marketing tools, including the Best Of The Web security logomark, were compromised in supply chain attacks, allegedly leaving website customers leaking their users' sensitive information.
❌ Twitter Leaks Apple iOS Users’ Location Data to Ad Partner ❌
📖 Read
via "Threatpost".
A Twitter glitch "inadvertently" leaked iOS users' location data to an unnamed partner.📖 Read
via "Threatpost".
Threat Post
Twitter Leaks Apple iOS Users’ Location Data to Ad Partner
A Twitter glitch "inadvertently" leaked iOS users' location data to an unnamed partner.
🕴 LockerGoga, MegaCortex Ransomware Share Unlikely Traits 🕴
📖 Read
via "Dark Reading: ".
New form of ransomware MegaCortex shares commonalities with LockerGoga, enterprise malware recently seen in major cyberattacks.📖 Read
via "Dark Reading: ".
Darkreading
LockerGoga, MegaCortex Ransomware Share Unlikely Traits
New form of ransomware MegaCortex shares commonalities with LockerGoga, enterprise malware recently seen in major cyberattacks.
❌ Pair of Cisco Bugs, One Unpatched, Affect Millions of Devices ❌
📖 Read
via "Threatpost".
The two high-severity bugs impact a wide array of enterprise, military and government networks.📖 Read
via "Threatpost".
Threat Post
Pair of Cisco Bugs, One Unpatched, Affect Millions of Devices
The two high-severity bugs impact a wide array of enterprise, military and government networks.
🕴 Thrangrycat Claws Cisco Customer Security 🕴
📖 Read
via "Dark Reading: ".
A linked pair of vulnerabilities could allow an attacker to take over many different types of Cisco networking components.📖 Read
via "Dark Reading: ".
Darkreading
Thrangrycat Claws Cisco Customer Security
A linked pair of vulnerabilities could allow an attacker to take over many different types of Cisco networking components.
🕴 Korean APT Adds Rare Bluetooth Device-Harvester Tool 🕴
📖 Read
via "Dark Reading: ".
ScarCruft has evolved into a skilled and resourceful threat group, new research shows.📖 Read
via "Dark Reading: ".
Darkreading
Korean APT Adds Rare Bluetooth Device-Harvester Tool
ScarCruft has evolved into a skilled and resourceful threat group, new research shows.
⚠ Feds hook ELECTRICFISH, new Windows malware from North Korea ⚠
📖 Read
via "Naked Security".
The FBI and Department of Homeland Security have identified a new strain of malware from North Korea, representing the latest in a long line of cyber attacks from the country📖 Read
via "Naked Security".
Naked Security
Feds hook ELECTRICFISH, new Windows malware from North Korea
The FBI and Department of Homeland Security have identified a new strain of malware from North Korea, representing the latest in a long line of cyber attacks from the country
⚠ Windows 10 brings password-free access another step closer ⚠
📖 Read
via "Naked Security".
Microsoft has put another nail in the password’s coffin by winning a certification that will make it easier to log into Windows machines. 📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ White label SOS panic buttons can be hacked via SMS ⚠
📖 Read
via "Naked Security".
A Chinese white-label panic alarm used by elderly and vulnerable people can be remotely controlled by sending it simple SMS commands.📖 Read
via "Naked Security".
Naked Security
White label SOS panic buttons can be hacked via SMS
A Chinese white-label panic alarm used by elderly and vulnerable people can be remotely controlled by sending it simple SMS commands.
🔐 Facebook data privacy scandal: A cheat sheet 🔐
📖 Read
via "Security on TechRepublic".
Read about the saga of Facebook's failures in ensuring privacy for user data, including how it relates to Cambridge Analytica, the GDPR, the Brexit campaign, and the 2016 US presidential election.📖 Read
via "Security on TechRepublic".
TechRepublic
Facebook data privacy scandal: A cheat sheet
Read about the saga of Facebook's failures in ensuring privacy for user data, including how it relates to Cambridge Analytica, the GDPR, the Brexit campaign, and the 2016 US presidential election.
⚠ Update WhatsApp now! One call could give spies access to your phone ⚠
📖 Read
via "Naked Security".
A WhatsApp zero-day has allowed an “advanced cyber actor” to successfully install spyware on victims' phones with no more than a phone call.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
❌ Cynet: An Autonomous Security Platform for Any Size Organization ❌
📖 Read
via "Threatpost".
Cynet protects the entire internal environment – including hosts, files, users and the network.📖 Read
via "Threatpost".
Threat Post
Cynet: An Autonomous Security Platform for Any Size Organization
Cynet protects the entire internal environment – including hosts, files, users and the network.
❌ WhatsApp Zero-Day Exploited in Targeted Spyware Attacks ❌
📖 Read
via "Threatpost".
WhatsApp has patched a vulnerability that allowed attackers to install spyware on victims' phones.📖 Read
via "Threatpost".
Threat Post
WhatsApp Zero-Day Exploited in Targeted Spyware Attacks
WhatsApp has patched a vulnerability that allowed attackers to install spyware on victims' phones.
🔐 How to securely delete files in Linux with srm 🔐
📖 Read
via "Security on TechRepublic".
Don't entrust the deletion of sensitive data to the standard tools. Install this handy data wipe command for a more secure removal.📖 Read
via "Security on TechRepublic".
TechRepublic
How to securely delete files in Linux with srm
Don't entrust the deletion of sensitive data to the standard tools. Install this handy data wipe command for a more secure removal.
🔐 Slack vulnerability allows attackers to intercept, modify downloads 🔐
📖 Read
via "Security on TechRepublic".
Improper handling of a custom URI creates a vulnerability for users of the Slack Desktop client on Windows.📖 Read
via "Security on TechRepublic".
TechRepublic
Slack vulnerability allows attackers to intercept, modify downloads
Improper handling of a custom URI created a vulnerability, now patched, for users of the Electron-based Slack Desktop client on Windows.
🕴 Why AI Will Create Far More Jobs Than It Replaces 🕴
📖 Read
via "Dark Reading: ".
Just as spreadsheets and personal computers created a job boom in the '70s, so too will artificial intelligence spur security analysts' ability to defend against advanced threats.📖 Read
via "Dark Reading: ".
Dark Reading
Why AI Will Create Far More Jobs Than It Replaces
Just as spreadsheets and personal computers created a job boom in the '70s, so too will artificial intelligence spur security analysts' ability to defend against advanced threats.
❌ Linux Kernel Flaw Allows Remote Code-Execution ❌
📖 Read
via "Threatpost".
The bug is remotely exploitable without authentication or user interaction.📖 Read
via "Threatpost".
Threat Post
Linux Kernel Flaw Allows Remote Code-Execution
The bug is remotely exploitable without authentication or user interaction.