πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΄ Security at the Edge: Why It's Complicated πŸ•΄

Edge technology widens the attack surface by bringing data analysis closer to where it's collected. Now is the time for public and private sector groups to establish guidelines and identify security best-practices frameworks.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Zero Trust Research Reveals Nearly Half of All Security Leaders Do Not Believe They Will Be Breached Despite Increasing Attacks and Adoption of Zero Trust Strategies πŸ•΄

Industry-first report finds zero trust segmentation eliminates 5 cyber disasters per year and saves $20+ million annually.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Enhanced Threat Intelligence Portal Provides Consolidated Access to Kaspersky Threat Intelligence Expertise πŸ•΄

.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Help Organizations to Mitigate Risk in Microsoft 365 with 'Vectra Protect' πŸ•΄

Vectra offers a free of charge security assessment for your cloud tenant.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Ordr Secures $40 Million in Series C Funding to Answer Increased Demand for Connected Device Security πŸ•΄

Rising threat of data breaches and ransomware attacks drives need for complete and accurate real-time information about devices and their risks.

πŸ“– Read

via "Dark Reading".
πŸ•΄ 10 No-BS Tips for Building a Diverse and Dynamic Security Team πŸ•΄

Advice from women and nonbinary security leaders on creating well-rounded security teams, stronger CISO leadership, and a more resilient industry.

πŸ“– Read

via "Dark Reading".
πŸ—“οΈ Researcher goes public with WordPress CSP bypass hack πŸ—“οΈ

Technique skirts web security controls

πŸ“– Read

via "The Daily Swig".
πŸ” Everything You Need To Know About the CIA Triad πŸ”

Learn about the CIA Triad and why it can be a helpful model to guide policies for information security within an organization.

πŸ“– Read

via "".
β€Ό CVE-2021-27914 β€Ό

A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-31000 β€Ό

solidus_backend is the admin interface for the Solidus e-commerce framework. Versions prior to 3.1.6, 3.0.6, and 2.11.16 contain a cross-site request forgery (CSRF) vulnerability. The vulnerability allows attackers to change the state of an order's adjustments if they hold its number, and the execution happens on a store administrator's computer. Users should upgrade to solidus_backend 3.1.6, 3.0.6, or 2.11.16 to receive a patch.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-24848 β€Ό

DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the `/api/programs/orgUnits?programs=` API endpoint in DHIS2 versions prior to 2.36.10.1 and 2.37.6.1. The system is vulnerable to attack only from users that are logged in to DHIS2, and there is no known way of exploiting the vulnerability without first being logged in as a DHIS2 user. The vulnerability is not exposed to a non-malicious user and requires a conscious attack to be exploited. A successful exploit of this vulnerability could allow the malicious user to read, edit and delete data in the DHIS2 instance's database. Security patches are now available for DHIS2 versions 2.36.10.1 and 2.37.6.1. One may apply mitigations at the web proxy level as a workaround. More information about these mitigations is available in the GitHub Security Advisory.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ EnemyBot Puts Enterprises in the Crosshairs With Raft of '1-Day' Bugs πŸ•΄

EnemyBot DDoS botnet is rapidly weaponizing security bugs disclosed in CMS systems like WordPress plug-ins, Android devices, commercial Web servers, and other enterprise applications.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Netskope Acquires WootCloud, Extending Zero Trust Capabilities to Enterprise IoT πŸ•΄

Contextual Intelligence derived with machine learning helps customers identify, assess and remediate threats from IoT devices on their networks, achieving full visibility and control.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Lookout Acquires SaferPass To Address The Rising Threat Of Identity Theft πŸ•΄

Password management solution delivers proactive, seamless approach to protecting privacy and login credentials for consumers and businesses; Password Management market expected to reach $3 billion by 2026.

πŸ“– Read

via "Dark Reading".
πŸ•΄ ReliaQuest to Acquire Digital Shadows πŸ•΄

Combined company creates world-class security operations platform to offer customers unmatched visibility and detection to defend against threats.

πŸ“– Read

via "Dark Reading".
πŸ•΄ NetSPI's New Breach and Attack Simulation Enhancements Help Organizations Achieve Behavior-Based Threat Detection πŸ•΄

Organizations leverage the platform-driven, human-delivered service to measure and continuously improve the efficacy of detective controls and MSSP coverage.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Netenrich Debuts Resolution Intelligence Secure Digital Operations Platform at RSA 2022 πŸ•΄

New operational analytics and AI/ML platform drives contextual intelligence and prioritized actions to anticipate risky behaviors, disrupt threats and insure business resilience.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Feds Seize Domains Dealing Stolen Personal Data πŸ•΄

WeLeakInfo.to and two related domains let users search data stolen in more than 10,000 different breaches.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Darktrace's David Masson on What Attacks on Critical Infrastructure Look Like πŸ•΄

In this Tech Talk, Darktrace's David Masson and Dark Reading's Terry Sweeney discuss the rise of destructive attacks against critical infrastructure.

πŸ“– Read

via "Dark Reading".
πŸ•΄ 12K Misconfigured Elasticsearch Buckets Ravaged by Extortionists πŸ•΄

The cloud instances were left open to the public Internet with no authentication, allowing attackers to wipe the data.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Hunting for Threats Using Network Traffic Flows πŸ•΄

SeclarityIO's NetworkSage platform analyzes network traffic data to identify attacks before they become real problems.

πŸ“– Read

via "Dark Reading".