πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
❌ Taming the Digital Asset Tsunami ❌

Rob Gurzeev, CEO and Co-Founder of CyCognito, explores external attack surface soft spots tied to an ever-expanding number of digital assets companies too often struggle to keep track of and manage effectively.

πŸ“– Read

via "Threat Post".
πŸ•΄ How Do We Secure Our Cities From Attack? πŸ•΄

Physical access matters in keeping people and buildings safe. Points to consider when establishing a physical security protocol are ways to lock down an area to keep people safe, approaches to communicate clear safety directions, and access control.

πŸ“– Read

via "Dark Reading".
⚠ Know your enemy! Learn how cybercrime adversaries get in… ⚠

Here's how 144 recent attacks actually went down in real life. Don't let this happen to you!

πŸ“– Read

via "Naked Security".
πŸ—“οΈ WWDC 2022: Apple showcases next-gen security tech at annual developer event πŸ—“οΈ

Passkeys, Safety Check, and Private Access Tokens demonstrated during week-long virtual conference

πŸ“– Read

via "The Daily Swig".
πŸ‘1
β€Ό CVE-2022-31497 β€Ό

LibreHealth EHR Base 2.0.0 allows interface/main/finder/finder_navigation.php patient XSS.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30552 β€Ό

Das U-Boot 2022.01 has a Buffer Overflow.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-1996 β€Ό

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30790 β€Ό

Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.

πŸ“– Read

via "National Vulnerability Database".
⚠ SSNDOB Market servers seized, identity theft β€œbrokerage”” shut down ⚠

The online identity "brokerage" SSNDOB Market didn't want pople to be in any doubt what it was selling.

πŸ“– Read

via "Naked Security".
β€Ό CVE-2022-30919 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30913 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-14125 β€Ό

A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30926 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30925 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30915 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30910 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30914 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-24296 β€Ό

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning System AG-150A-A Ver. 3.21 and prior, Air Conditioning System AG-150A-J Ver. 3.21 and prior, Air Conditioning System GB-50AD Ver. 3.21 and prior, Air Conditioning System GB-50ADA-A Ver. 3.21 and prior, Air Conditioning System GB-50ADA-J Ver. 3.21 and prior, Air Conditioning System EB-50GU-A Ver. 7.10 and prior, Air Conditioning System EB-50GU-J Ver. 7.10 and prior, Air Conditioning System AE-200J Ver. 7.97 and prior, Air Conditioning System AE-200A Ver. 7.97 and prior, Air Conditioning System AE-200E Ver. 7.97 and prior, Air Conditioning System AE-50J Ver. 7.97 and prior, Air Conditioning System AE-50A Ver. 7.97 and prior, Air Conditioning System AE-50E Ver. 7.97 and prior, Air Conditioning System EW-50J Ver. 7.97 and prior, Air Conditioning System EW-50A Ver. 7.97 and prior, Air Conditioning System EW-50E Ver. 7.97 and prior, Air Conditioning System TE-200A Ver. 7.97 and prior, Air Conditioning System TE-50A Ver. 7.97 and prior and Air Conditioning System TW-50A Ver. 7.97 and prior allows a remote unauthenticated attacker to cause a disclosure of encrypted message of the air conditioning systems by sniffing encrypted communications.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30916 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30917 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-1997 β€Ό

Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.

πŸ“– Read

via "National Vulnerability Database".