πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
⚠ Mobile password managers vulnerable to phishing apps ⚠

Several leading Android-based password managers can be fooled into auto-filling login credentials on behalf of fake phishing apps.

πŸ“– Read

via "Naked Security".
πŸ•΄ Google To Let Users Disable Automatic Login to Chrome πŸ•΄

The decision comes days after security researcher had blasted company for jeopardizing user privacy with browser update.

πŸ“– Read

via "Dark Reading: ".
❌ Android App Verification Issues Pave Way For Phishing Attacks ❌

A research team suggested a new secure-by-design API after discovering design flaws in the way Android apps are verified by password managers.

πŸ“– Read

via "The first stop for security news | Threatpost ".
⚠ WhatsApp cofounder: β€œI sold my users’ privacy” ⚠

Regretful WhatsApp cofounder Brian Acton has joined the ranks of the Silicon Valley mea-culpa-rati.

πŸ“– Read

via "Naked Security".
❌ iPhone XS Passcode Bypass Hack Exposes Contacts, Photos ❌

Bypass works on iOS 12 and Apple's latest iPhone XS model phones allowing an attacker to access contacts and photos.

πŸ“– Read

via "The first stop for security news | Threatpost ".
❌ Another Linux Kernel Bug Surfaces, Allowing Root Access ❌

Android, Debian and Ubuntu users are still at risk.

πŸ“– Read

via "The first stop for security news | Threatpost ".
πŸ•΄ Facebook Hacked, 50 Million Users Affected πŸ•΄

A vulnerability in Facebook's "View As" feature let attackers steal security tokens linked to 50 million accounts, the company confirms.

πŸ“– Read

via "Dark Reading: ".
πŸ” Python is a hit with hackers, report finds πŸ”

Imperva: Up to 77 percent of the sites we monitor were attacked by a Python-based tool.

πŸ“– Read

via "Security on TechRepublic".
❌ Facebook Data Breach Impacts Almost 50 Million Accounts ❌

Hackers exploited a flaw in Facebook’s code impacting its β€œView As” feature.

πŸ“– Read

via "The first stop for security news | Threatpost ".
⚠ Big Facebook breach: 50 million accounts affected ⚠

Facebook has suffered a data breach affecting almost 50 million accounts. Another 40 million have been reset as a "precautionary" measure.

πŸ“– Read

via "Naked Security".
πŸ” Facebook discloses network breach affecting 50 million user accounts πŸ”

Facebook said attackers exploited a vulnerability in its code that let them steal access tokens when users switched over to a public profile view via the "View As" feature.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ FBI IC3 Warns of RDP Vulnerability πŸ•΄

Government agencies remind users that RDP can be used for malicious purposes by criminal actors.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ 'Torii' Breaks New Ground For IoT Malware πŸ•΄

Stealth, persistence mechanism and ability to infect a wide swath of devices make malware dangerous and very different from the usual Mirai knockoffs, Avast says.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ 4 Traits of a Cyber-Resilient Culture πŸ•΄

Companies with a solid track record of cybersecurity share these practices and characteristics.

πŸ“– Read

via "Dark Reading: ".
⚠ Monday review – the hot 23 stories of the week ⚠

From the big Facebook breach to vulnerable Android password managers - catch up with everything we've written in the last seven days. It's weekly roundup time.

πŸ“– Read

via "Naked Security".
⚠ Monero fixes major β€˜burning bug’ flaw, preventing mass devaluation ⚠

The flaw arises from the use of stealth wallet addresses, an anonymity concept that's especially important to privacy-sensitive Monero users.

πŸ“– Read

via "Naked Security".
⚠ Facebook: turn off SMS 2FA if you don’t want your number used for ads ⚠

Facebook has been adding phone numbers registered for 2FA to the other data it uses to target people with advertising.

πŸ“– Read

via "Naked Security".
ATENTIONβ€Ό New - CVE-2015-9268

Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9267

Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.

πŸ“– Read

via "National Vulnerability Database".
❔ 50 Million Facebook Accounts Hacked – Time to act before it’s too late! ❔

Estimated reading time: 2 minutesThe afternoon of September 28th 2018 brought in a wave of shock for 50 million Facebook users, when they found themselves logged out of Facebook!! In one of the worst data breach attacks in the history of Facebook, over 90 million users on Friday afternoon, were forced to log out and login back to their accounts. The step was initiated as a precautionary measure by Facebook to reset the access tokens for over 90 million of its users, as hackers managed to exploit a vulnerability in Facebook coding. For this social media giant, its β€˜View As’ feature proved extremely vulnerable, as hackers managed to log into Facebook accounts of other people, by stealing access tokens. The View As feature was basically meant to allow users to see how their profiles appear for other users. Upon learning about this exploit, Facebook immediately reset the access tokens of more than 50 million of its registered accounts. So, while the whole world is busy browsing the internet for answers to HOW and WHY this data breach happened, it’s better to spare sometime to read about immediate actions you can take, to prevent your own data from getting breached: #1 Reset Your Password In case your account was one amongst the 50 million Facebook accounts that got hacked on Friday and the hacker managed to change your password, DO NOT PANIC! You can still try your best to regain access to your account by clicking on β€œForgot your password?” option under your Facebook login. Start by finding your account by entering the primary or secondary email address, you had used for registering with Facebook. Once you are successful in finding your account, you can easily choose to Reset Your Password. However, this process of password recovery holds true, only if you continue to have access to those email addresses. Just in case, you no more access those email ids but would like to reset your password, you can always use the β€œNo longer have access to these?” link, in which case, facebook will ask you for an alternate option to verify your identity. #2 Change Your Password Immediately Even if you were lucky enough to not have your account compromised, as a precautionary measure it’s better to change your password before it’s too late. All you need to do is to click on Security and Login under Settings and scroll down to Login > Change password. Try to choose a stronger password this time and something that is unique only for your Facebook account. Once you have reset your account with a new password, it is advisable to log out of all sessions, provided the fact that your security settings and contact details are up to date. #3 Check Passwords of Other Accounts Registering with Facebook requires you to enter an email ID and often times, you tend to use the same login details for logging into Facebook as well. Thus, while you reset/change the password of your Facebook account, it is a good move to change the password of other accounts also that have the same login details. #4 Check Your Privacy & Security Settings Here are few steps you can take to improve your privacy and security on Facebook: Update contact details, mobile numbers and email addresses under General Limit the visibility of your posts by selecting a comfortable Privacy setting and allow only friends to see your posts. Boost up your security measures by opting for notifications for unrecognized logins and select only couple of trusted friends for recovery of account, in case your account gets locked out. The post 50 Million Facebook Accounts Hacked – Time to act before it’s too late! appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.

πŸ“– Read

via "Quick Heal Blog | Latest computer security news, tips, and advice".