β GandCrab Ransomware Shutters Its Operations β
π Read
via "Threatpost".
After a year of success, its operators say they earned millions -- and are ready to retire.π Read
via "Threatpost".
Threat Post
GandCrab Ransomware Shutters Its Operations
After a year of success, its operators say they earned millions β and are ready to retire.
π΄ Certifiably Distracted: The Economics of Cybersecurity π΄
π Read
via "Dark Reading: ".
Is cybersecurity worth the investment? It depends.π Read
via "Dark Reading: ".
Darkreading
Certifiably Distracted: The Economics of Cybersecurity
Is cybersecurity worth the investment? It depends.
π macOS Bug Yet Again Allows for Bypass of Security Protections π
π Read
via "Subscriber Blog RSS Feed ".
The latest in a line of ways to bypass Apple's security safeguards was disclosed at the Objective By the Sea conference over the weekend.π Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
macOS Bug Yet Again Allows for Bypass of Security Protections
The latest in a line of ways to bypass Apple's security safeguards was disclosed at the Objective By the Sea conference over the weekend.
β Smart-TV Bug Allows Rogue Broadcasts β
π Read
via "Threatpost".
An attacker could gain remote access by chaining together an exploit for home routers with the TV flaw.π Read
via "Threatpost".
Threat Post
Smart-TV Bug Allows Rogue Broadcasts
An attacker could gain remote access by chaining together an exploit for home routers with the TV flaw.
π How to install CA certificates in Ubuntu server π
π Read
via "Security on TechRepublic".
Having trouble getting CA certificates installed and recognized in Ubuntu Server? Find out how it's done with a few quick commands.π Read
via "Security on TechRepublic".
TechRepublic
How to install CA certificates in Ubuntu server
Having trouble getting CA certificates installed and recognized in Ubuntu Server? Find out how it's done with a few quick commands.
π΄ Majority of C-Level Executives Expect a Cyber Breach π΄
π Read
via "Dark Reading: ".
Survey of executives in the US and UK shows that worries abound -- about cyberattacks and the lack of resources to defend against them.π Read
via "Dark Reading: ".
Dark Reading
Majority of C-Level Executives Expect a Cyber Breach
Survey of executives in the US and UK shows that worries abound -- about cyberattacks and the lack of resources to defend against them.
β WWDC 2019: Apple Takes Aim at Facebook on Privacy β
π Read
via "Threatpost".
The iPhone-maker announced the 'Sign in with Apple' API, and restrictions on location-tracking.π Read
via "Threatpost".
Threat Post
WWDC 2019: Apple Takes Aim at Facebook on Privacy
The iPhone-maker announced the 'Sign in with Apple' API, and restrictions on location-tracking.
β Tap βn Ghost Attack Creatively Targets Android Devices β
π Read
via "Threatpost".
Researchers use malicious NFC tags and booby-trapped physical surfaces to connect Android devices to malicious wireless networks.π Read
via "Threatpost".
Threat Post
Tap βn Ghost Attack Creatively Targets Android Devices
Researchers use malicious NFC tags and booby-trapped physical surfaces to connect Android devices to malicious wireless networks.
ATENTIONβΌ New - CVE-2017-14853
π Read
via "National Vulnerability Database".
The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attacker is able to run shell commands and receive valid output from the device.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2017-14852
π Read
via "National Vulnerability Database".
An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2017-14851
π Read
via "National Vulnerability Database".
A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25. The vulnerability is in the login page, where the authentication validation process contains an insecure SELECT query. The attack allows for authentication bypass.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2017-14850
π Read
via "National Vulnerability Database".
All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-site Scripting due to improper external user-input validation. An attacker with access to the web interface is able to hijack sessions or navigate victims outside of SiteOmat, to a malicious server owned by him.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2017-14728
π Read
via "National Vulnerability Database".
An authentication bypass was found in an unknown area of the SiteOmat source code. All SiteOmat BOS versions are affected, prior to the submission of this exploit. Also, the SiteOmat does not force administrators to switch passwords, leaving SSH and HTTP remote authentication open to public.π Read
via "National Vulnerability Database".
π΄ Baltimore Ransomware Attacker Was Behind Now-Suspended Twitter Account π΄
π Read
via "Dark Reading: ".
Researchers at Armor were able to confirm the person or persons behind a Twitter account that appeared to be leaking confidential files was the actual ransomware attacker that hit the city.π Read
via "Dark Reading: ".
Darkreading
Baltimore Ransomware Attacker Was Behind Now-Suspended Twitter Account
Researchers at Armor were able to confirm the person or persons behind a Twitter account that appeared to be leaking confidential files was the actual ransomware attacker that hit the city.
π΄ Microsoft Urges Businesses to Patch 'BlueKeep' Flaw π΄
π Read
via "Dark Reading: ".
Fearing another worm of WannaCry severity, Microsoft warns vulnerable users to apply the software update for CVE-2019-0708.π Read
via "Dark Reading: ".
Darkreading
Microsoft Urges Businesses to Patch 'BlueKeep' Flaw
Fearing another worm of WannaCry severity, Microsoft warns vulnerable users to apply the software update for CVE-2019-0708.
ATENTIONβΌ New - CVE-2017-14854
π Read
via "National Vulnerability Database".
A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects all versions prior to 2017-09-25.π Read
via "National Vulnerability Database".
π΄ Zebrocy APT Group Expands Malware Arsenal with New Backdoor Family π΄
π Read
via "Dark Reading: ".
Group's constant experimentation and malware changes are complicating efforts for defenders, Kaspersky Lab says.π Read
via "Dark Reading: ".
Darkreading
Zebrocy APT Group Expands Malware Arsenal with New Backdoor Family
Group's constant experimentation and malware changes are complicating efforts for defenders, Kaspersky Lab says.
β Apple sunsets iTunes β
π Read
via "Naked Security".
RIP iTunes, hello to the standalone Music, Podcasts and TV apps that are taking its place.π Read
via "Naked Security".
Naked Security
Apple sunsets iTunes
RIP iTunes, hello to the standalone Music, Podcasts and TV apps that are taking its place.
β Infosecurity Europe: Cryptojacking is Making a Comeback β
π Read
via "Threatpost".
At Infosecurity Europe, a security expert from Guardicore discusses a new cryptomining malware campaign called Nanshou and why the cryptojacking threat is set to get worse.π Read
via "Threatpost".
Threat Post
Infosecurity Europe: Cryptojacking is Making a Comeback
At Infosecurity Europe, a security expert from Guardicore discusses a new cryptomining malware campaign called Nanshou and why the cryptojacking threat is set to get worse.
β US visa applicants required to hand over social media info β
π Read
via "Naked Security".
As of Friday, it's no longer optional - the US is been asking for five years of social media information.π Read
via "Naked Security".
Naked Security
US visa applicants required to hand over social media info
As of Friday, itβs no longer optional β the US is asking for five years of social media information.
β GandCrab ransomware service shuts up shop β
π Read
via "Naked Security".
The authors of the GandCrab ransomware strain are shutting their ransomware-as-a-service portal, allegedly walking away with a cool $150m.π Read
via "Naked Security".
Naked Security
GandCrab ransomware crooks to shut up shop
GandCrabβs creators are giving themselves a βwell-deserved retirementβ after extorting (they say) $2 billion.