❌ WordPress WP Live Chat Support Plugin Fixes XSS Flaw ❌
📖 Read
via "Threatpost".
A cross-site scripting flaw in a popular WordPress plugin enables an unauthenticated attacker to insert JavaScript payloads into impacted websites.📖 Read
via "Threatpost".
Threat Post
WordPress WP Live Chat Support Plugin Fixes XSS Flaw
A cross-site scripting flaw in a popular WordPress plugin enables an unauthenticated attacker to insert JavaScript payloads into impacted websites.
🕴 Q1 2019 Smashes Record For Most Reported Vulnerabilities in a Quarter 🕴
📖 Read
via "Dark Reading: ".
Once again, a high-proportion of the reported flaws have no current fix, according to Risk Based Security.📖 Read
via "Dark Reading: ".
Dark Reading
Q1 2019 Smashes Record For Most Reported Vulnerabilities in a Quarter
Once again, a high-proportion of the reported flaws have no current fix, according to Risk Based Security.
🕴 Artist Uses Malware in Installation 🕴
📖 Read
via "Dark Reading: ".
A piece of 'art' currently up for auction features six separate types of malware running on a vulnerable computer.📖 Read
via "Dark Reading: ".
Darkreading
Artist Uses Malware in Installation
A piece of 'art' currently up for auction features six separate types of malware running on a vulnerable computer.
🕴 DevOps Repository Firms Establish Shared Analysis Capability 🕴
📖 Read
via "Dark Reading: ".
Following an attack on their users, and their shared response, Atlassian, GitHub, and GitLab decide to make the sharing of attack information a permanent facet of their operations.📖 Read
via "Dark Reading: ".
Dark Reading
Cyberattacks & Data Breaches recent news | Dark Reading
Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading
⚠ Monday review – the hot 20 stories of the week ⚠
📖 Read
via "Naked Security".
It was a week of patches - from a severe Linux kernel flaw to a new 'wormable' Windows bug, here's a roundup of the week's top stories.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 20 stories of the week
It was a week of patches – from a severe Linux kernel flaw to a new ‘wormable’ Windows bug, here’s a roundup of the week’s top stories.
⚠ Bots rigged Russian finale of ‘The Voice Kids’ talent show ⚠
📖 Read
via "Naked Security".
It turns out that robo-dialed calls accounted for 56.5% of the phone-in vote for the millionaire's daughter.📖 Read
via "Naked Security".
Naked Security
Bots rigged Russian finale of ‘The Voice Kids’ talent show
It turns out that robo-dialed calls accounted for 56.5% of the phone-in vote for the millionaire’s daughter.
⚠ Facebook bans accounts of fake news firm ⚠
📖 Read
via "Naked Security".
It's not clear who paid Archimedes Group for its reality-warping campaigns, but it's clear disinformation is now a global scourge.📖 Read
via "Naked Security".
Naked Security
Facebook bans accounts of fake news firm
It’s not clear who paid Archimedes Group for its reality-warping campaigns, but it’s clear disinformation is now a global scourge.
🔐 How to block hijacking attacks on your Google account 🔐
📖 Read
via "Security on TechRepublic".
Bot and phishing attacks can compromise your G Suite account, but there is an easy way to block the majority of these attempts, according to Google.📖 Read
via "Security on TechRepublic".
TechRepublic
How to block hijacking attacks on your Google account
Bot and phishing attacks can compromise your G Suite account, but there is an easy way to block the majority of these attempts, according to Google.
🕴 Black Hat Q&A: Bruce Schneier Calls For Public-Interest Technologists 🕴
📖 Read
via "Dark Reading: ".
Ahead of his 2019 Black Hat USA talk, cybersecurity luminary Bruce Schneier explains why it's so important for tech experts to be actively involved in setting public policy.📖 Read
via "Dark Reading: ".
Dark Reading
Black Hat Q&A: Bruce Schneier Calls For Public-Interest Technologists
Ahead of his 2019 Black Hat USA talk, cybersecurity luminary Bruce Schneier explains why it's so important for tech experts to be actively involved in setting public policy.
🕴 Black Hat Q&A: Bruce Schneier Calls For Public-Interest Technologists 🕴
📖 Read
via "Dark Reading: ".
Ahead of his 2019 Black Hat USA talk, cybersecurity luminary Bruce Schneier explains why it's so important for tech experts to be actively involved in setting public policy.📖 Read
via "Dark Reading: ".
Dark Reading
Black Hat Q&A: Bruce Schneier Calls For Public-Interest Technologists
Ahead of his 2019 Black Hat USA talk, cybersecurity luminary Bruce Schneier explains why it's so important for tech experts to be actively involved in setting public policy.
⚠ Brave browser concerned that Client Hints could be abused for tracking ⚠
📖 Read
via "Naked Security".
Privacy-focused browser Brave has criticised an industry proposal it says would make browser fingerprinting easier.📖 Read
via "Naked Security".
Naked Security
Brave browser concerned that Client Hints could be abused for tracking
Privacy-focused browser Brave has criticised an industry proposal it says would make browser fingerprinting easier.
⚠ CEO told to hand back 757,000 fraudulently obtained IP addresses ⚠
📖 Read
via "Naked Security".
A company accused of fraudulently obtaining 757,000 IPv4 addresses has been ordered to hand them back.📖 Read
via "Naked Security".
Naked Security
CEO told to hand back 757,000 fraudulently obtained IP addresses
A company accused of fraudulently obtaining 757,000 IPv4 addresses has been ordered to hand them back.
🕴 How a Manufacturing Firm Recovered from a Devastating Ransomware Attack 🕴
📖 Read
via "Dark Reading: ".
The infamous Ryuk ransomware slammed a small company that makes heavy-duty vehicle alternators for government and emergency fleet. Here's what happened.📖 Read
via "Dark Reading: ".
Darkreading
How a Manufacturing Firm Recovered from a Devastating Ransomware Attack
The infamous Ryuk ransomware slammed a small company that makes heavy-duty vehicle alternators for government and emergency fleet. Here's what happened.
❌ ZombieLoad: How Intel’s Latest Side Channel Bug Was Discovered and Disclosed ❌
📖 Read
via "Threatpost".
Daniel Gruss, the researcher behind Spectre, Meltdown - and most recently, ZombieLoad - Intel CPU side channel attacks, gives an inside look into how he discovered the flaws.📖 Read
via "Threatpost".
Threat Post
ZombieLoad: How Intel’s Latest Side Channel Bug Was Discovered and Disclosed
Daniel Gruss, the researcher behind Spectre, Meltdown - and most recently, ZombieLoad - Intel CPU side channel attacks, gives an inside look into how he discovered the flaws.
🕴 7 Signs of the Rising Threat of Magecart Attacks in 2019 🕴
📖 Read
via "Dark Reading: ".
Magecart attacks continue to grow in momentum. Here are the stats and stories that show what's behind the mayhem.📖 Read
via "Dark Reading: ".
Darkreading
7 Signs of the Rising Threat of Magecart Attacks in 2019
Magecart attacks continue to grow in momentum. Here are the stats and stories that show what's behind the mayhem.
❌ Slack Bug Allows Remote File Hijacking, Malware Injection ❌
📖 Read
via "Threatpost".
An attacker can supply a malicious hyperlink in order to secretly alter the download path for files shared in a Slack channel.📖 Read
via "Threatpost".
Threat Post
Slack Bug Allows Remote File Hijacking, Malware Injection
An attacker can supply a malicious hyperlink in order to secretly alter the download path for files shared in a Slack channel.
ATENTION‼ New - CVE-2015-9287 (the_university_of_cambridge_web_authentication_system_apache_authentication_agent)
📖 Read
via "National Vulnerability Database".
Directory Traversal was discovered in University of Cambridge mod_ucam_webauth before 2.0.2. The key identification field ("kid") of the IdP's HTTP response message ("WLS-Response") can be manipulated by an attacker. The "kid" field is not signed like the rest of the message, and manipulation is therefore trivial. The "kid" field should only ever represent an integer. However, it is possible to provide any string value. An attacker could use this to their advantage to force the application agent to load the RSA public key required for message integrity checking from an unintended location.📖 Read
via "National Vulnerability Database".
🕴 Killer SecOps Skills: Soft Is the New Hard 🕴
📖 Read
via "Dark Reading: ".
The sooner we give mindsets and tool sets equal bearing, the better. We must put SOC team members through rigorous training for emergency situations.📖 Read
via "Dark Reading: ".
Darkreading
Killer SecOps Skills: Soft Is the New Hard
The sooner we give mindsets and tool sets equal bearing, the better. We must put SOC team members through rigorous training for emergency situations.
🕴 Financial Sector Under Siege 🕴
📖 Read
via "Dark Reading: ".
The old take-the-money-and-run approach has been replaced by siege tactics such as DDOS attacks and land-and-expand campaigns with multiple points of persistence and increased dwell time.📖 Read
via "Dark Reading: ".
Dark Reading
Cloud Security recent news | Dark Reading
Explore the latest news and expert commentary on Cloud Security, brought to you by the editors of Dark Reading
❌ Behind the Naming of ZombieLoad and Other Intel Spectre-Like Flaws ❌
📖 Read
via "Threatpost".
A lot of thought and meaning goes into the naming of infamous CPU side channel flaws, like ZombieLoad, Spectre and Meltdown.📖 Read
via "Threatpost".
Threat Post
Behind the Naming of ZombieLoad and Other Intel Spectre-Like Flaws
A lot of thought and meaning goes into the naming of infamous CPU side channel flaws, like ZombieLoad, Spectre and Meltdown.
❌ Salesforce Woes Linger as Admins Clean Up After Service Outage ❌
📖 Read
via "Threatpost".
An accidental permissions snafu caused a massive outage for all Salesforce customers that continues to affect some businesses.📖 Read
via "Threatpost".
Threat Post
Salesforce Woes Linger as Admins Clean Up After Service Outage
An accidental permissions snafu caused a massive outage for all Salesforce customers that continues to affect some businesses.