πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2022-1577 β€Ό

The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack. This could lead to cases where attackers can send backup notification emails to themselves, which contain more details. Or disable the automatic backup schedule

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-1570 β€Ό

The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-1422 β€Ό

The Discy WordPress theme before 5.2 does not check for CSRF tokens in the AJAX action discy_reset_options, allowing an attacker to trick an admin into resetting the site settings back to defaults.

πŸ“– Read

via "National Vulnerability Database".
❌ Paying Ransomware Paints Bigger Bullseye on Target’s Back ❌

Ransomware attackers often strike targets twice, regardless of whether the ransom was paid.

πŸ“– Read

via "Threat Post".
❌ Taming the Digital Asset Tsunami ❌

Rob Gurzeev, CEO and Co-Founder of CyCognito, explores external attack surface soft spots tied to an ever-expanding number of digital assets companies too often struggle to keep track of and manage effectively.

πŸ“– Read

via "Threat Post".
πŸ•΄ How Do We Secure Our Cities From Attack? πŸ•΄

Physical access matters in keeping people and buildings safe. Points to consider when establishing a physical security protocol are ways to lock down an area to keep people safe, approaches to communicate clear safety directions, and access control.

πŸ“– Read

via "Dark Reading".
⚠ Know your enemy! Learn how cybercrime adversaries get in… ⚠

Here's how 144 recent attacks actually went down in real life. Don't let this happen to you!

πŸ“– Read

via "Naked Security".
πŸ—“οΈ WWDC 2022: Apple showcases next-gen security tech at annual developer event πŸ—“οΈ

Passkeys, Safety Check, and Private Access Tokens demonstrated during week-long virtual conference

πŸ“– Read

via "The Daily Swig".
πŸ‘1
β€Ό CVE-2022-31497 β€Ό

LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30552 β€Ό

Das U-Boot 2022.01 has a Buffer Overflow.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-1996 β€Ό

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30790 β€Ό

Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.

πŸ“– Read

via "National Vulnerability Database".
⚠ SSNDOB Market servers seized, identity theft β€œbrokerage”” shut down ⚠

The online identity "brokerage" SSNDOB Market didn't want pople to be in any doubt what it was selling.

πŸ“– Read

via "Naked Security".
β€Ό CVE-2022-30919 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30913 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-14125 β€Ό

A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30926 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30925 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30915 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30910 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30914 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".