πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“’ GitHub Enterprise Server 3.5 is equipped with a horde of new security protections πŸ“’

Admins are also given more controls to ensure the smooth running of servers, be it on-prem or in the cloud

πŸ“– Read

via "ITPro".
πŸ“’ What is your digital footprint? πŸ“’

Your digital footprint is always growing – so we explore how you can keep it under control

πŸ“– Read

via "ITPro".
πŸ“’ Russian Killnet cyber attacks begin on Italian-linked businesses πŸ“’

Italy's cyber security authority issued a warning to all public and private sector organisations with links to the country to prepare for an increased number of cyber attacks from the pro-Russian hackers

πŸ“– Read

via "ITPro".
πŸ“’ WithSecure CTO: Industry needs to do a better job of targeting ransomware supply chains πŸ“’

The centralisation of services and tools for hackers should represent a point of vulnerability for those fighting cyber crime

πŸ“– Read

via "ITPro".
πŸ“’ Chinese hackers exploit Microsoft zero-day as list of vulnerable Office products grows πŸ“’

Microsoft has published a support guide and temporary workarounds for IT admins to mitigate the threat

πŸ“– Read

via "ITPro".
πŸ“’ What makes for the most deceptive phishing attacks? πŸ“’

Phishing attacks are evolving to circumvent protective measures. What can businesses do to ensure they don’t succeed?

πŸ“– Read

via "ITPro".
πŸ“’ Microsoft Windows Defender review: An ideal (if unfriendly) business security solution πŸ“’

Central management puts Defender head and shoulders above other free options; the fact that it's already deployed doesn't hurt either

πŸ“– Read

via "ITPro".
πŸ“’ India backtracks on biometric ID system warning πŸ“’

Despite alerting citizens to problems with the system, it has now withdrawn the warning two days after its publication

πŸ“– Read

via "ITPro".
πŸ“’ Fresh Microsoft Office zero-day executes code on fully patched applications πŸ“’

Malicious documents saved in Rich Text Format are especially concerning since they can execute code without even being opened

πŸ“– Read

via "ITPro".
πŸ“’ How to turn on Windows Defender πŸ“’

Find out how to switch on Windows Defender in Windows 10 and older versions of the OS

πŸ“– Read

via "ITPro".
❌ Evil Corp Pivots LockBit to Dodge U.S. Sanctions ❌

The cybercriminal group is distancing itself from its previous branding by shifting tactics and tools once again in an aim to continue to profit from its nefarious activity.

πŸ“– Read

via "Threat Post".
πŸ‘1
πŸ•΄ For Ransomware, Speed Matters πŸ•΄

Someone interested in putting together a ransomware campaign has to consider several factors. The LockBit group touts its speed over competing families to attract potential buyers for its ransowmare-as-a-service.

πŸ“– Read

via "Dark Reading".
❌ Old Hacks Die Hard: Ransomware, Social Engineering Top Verizon DBIR Threats – Again ❌

Deja-Vu data from this year's DBIR report feels like we are stuck in the movie 'Groundhog Day.'

πŸ“– Read

via "Threat Post".
β€Ό CVE-2021-42886 β€Ό

TOTOLINK EX1200T V4.1.2cu.5215 contains an information disclosure vulnerability where an attacker can get the apmib configuration file without authorization, and usernames and passwords can be found in the decoded file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-42887 β€Ό

In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Why Network Object Management Is Critical for Managing Multicloud Network Security πŸ•΄

If you want your IT and security administrators to get buried in trivial workloads and productivity bottlenecks, having poor network object management is a great way to accomplish that.

πŸ“– Read

via "Dark Reading".
πŸ” Friday Five 6/3 πŸ”

In this week's Friday Five, read up on how Russian ransomware gangs are wreaking havoc, how software vulnerabilities may put election integrity at risk, and why you should be careful when donating to Ukraine.


πŸ“– Read

via "".
β€Ό CVE-2021-42888 β€Ό

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType to attack.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-42889 β€Ό

In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, wifiname, etc.) without authorization.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-42890 β€Ό

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack.

πŸ“– Read

via "National Vulnerability Database".
⚠ Atlassian announces 0-day hole in Confluence Server – update soon! ⚠

Zero-day announced - here's what you need to know

πŸ“– Read

via "Naked Security".