πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2022-1875 β€Ό

Inappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-1869 β€Ό

Type Confusion in V8 in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-1856 β€Ό

Use after free in User Education in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension or specific user interaction.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-1854 β€Ό

Use after free in ANGLE in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-1872 β€Ό

Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ When Human Security Meets PerimeterX πŸ•΄

Dark Reading's analysis suggests that the merger between Human Security and PerimeterX will bring modern defense strategies to disrupt cybercrime and fraud.

πŸ“– Read

via "Dark Reading".
🀯1
πŸ“’ Researchers uncover 'mysterious' Windows rootkit being actively exploited since 2016 πŸ“’

Experts at Kaspersky say the rootkit was found embedded inside the firmware image of legacy Asus and Gigabyte motherboards

πŸ“– Read

via "ITPro".
πŸ“’ Clinivate notifies customers of data breach πŸ“’

The hack exposed patients’ protected health information stored in Clinivate's electronic health record archive

πŸ“– Read

via "ITPro".
πŸ“’ Southern co-operative faces legal complaint for facial recognition CCTV πŸ“’

Rights group Big Brother Watch has written to the Information Commissioner to β€œstop unlawful processing”

πŸ“– Read

via "ITPro".
πŸ“’ DataGrail hires former Shopify VP Cathy Polinsky as CTO πŸ“’

The new hire stressed that data privacy is a human right as DataGrail looks to boost customer control

πŸ“– Read

via "ITPro".
πŸ“’ TSA amends cyber security requirements for pipeline operators πŸ“’

The revised directive provides operators with greater flexibility over security management and incident response

πŸ“– Read

via "ITPro".
πŸ“’ Facebook business accounts hijacked by infostealer malware campaign πŸ“’

Threat actors are using LinkedIn phishing to seize business, ad accounts for financial gain

πŸ“– Read

via "ITPro".
πŸ“’ T-Mobile to pay $350m to settle class action lawsuit πŸ“’

The news follows a breach that exposed the personal data of over 40 million customers in 2021

πŸ“– Read

via "ITPro".
πŸ“’ IT Pro News In Review: Slack ups subscription fees, ransomware attacks rise, Microsoft expands CRM capabilities πŸ“’

Catch up on the biggest headlines of the week in just two minutes

πŸ“– Read

via "ITPro".
πŸ“’ Ransomware now strikes one in 40 organisations per week, Check Point finds πŸ“’

VARs, systems integrators, and distributors saw a 143% year-on-year increase in attacks during Q2

πŸ“– Read

via "ITPro".
πŸ“’ McAfee and Visa offer 50% off antivirus subscriptions for small businesses πŸ“’

UK Visa Classic Business card holders can access the deal starting today

πŸ“– Read

via "ITPro".
πŸ“’ Microsoft warns hackers turning to IIS exploits to create backdoors in businesses πŸ“’

Internet information service modules formed part of the attack of Microsoft's own Exchange servers earlier this year

πŸ“– Read

via "ITPro".
πŸ“’ Price hike for consumers as data breach costs rocket to all-time high πŸ“’

Report from IBM Security finds that 60% of organizations have raised product or service prices post-breach

πŸ“– Read

via "ITPro".
πŸ‘1
β€Ό CVE-2022-2010 β€Ό

Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-36987 β€Ό

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could arbitrarily write files to a NetBackup Primary server.

πŸ“– Read

via "National Vulnerability Database".