ATENTION‼ New - CVE-2017-1107
📖 Read
via "National Vulnerability Database".
IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated attacker in further attacks against the system. IBM X-Force ID: 120906.📖 Read
via "National Vulnerability Database".
🕴 Serverless Computing from the Inside Out 🕴
📖 Read
via "Dark Reading: ".
The biggest 'serverless' risks don't stem from the technonology itself. They occur when organizations respond to the adoption from the outside in.📖 Read
via "Dark Reading: ".
Darkreading
Serverless Computing from the Inside Out
The biggest 'serverless' risks don't stem from the technology itself. They occur when organizations <i>respond</i> to the adoption from the outside in.
🕴 Verizon Media, Uber, PayPal Top List of Companies Paying Bug Bounties 🕴
📖 Read
via "Dark Reading: ".
A new report from HackerOne lists the top five companies running bug-hunting programs on the ethical hacking platform.📖 Read
via "Dark Reading: ".
Dark Reading
Cyberattacks & Data Breaches recent news | Dark Reading
Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading
🔏 Medical Debt Collector Poised to Shutter Following 2018 Breach 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
A data breach and mounting cybersecurity consulting costs, legal requirements, and regulatory obligations, proved too much for this company to come back from.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Medical Debt Collector Poised to Shutter Following 2018 Breach
A data breach and mounting cybersecurity consulting costs, legal requirements, and regulatory obligations, proved too much for this company to come back from.
❌ Google Releases Open Source Tool For Computational Privacy ❌
📖 Read
via "Threatpost".
Google's new multi-party computation tool allows companies to work together with confidential data sets.📖 Read
via "Threatpost".
Threat Post
Google Releases Open Source Tool For Computational Privacy
Google's new multi-party computation tool allows companies to work together with confidential data sets.
🕴 Critical Firefox Vuln Used in Targeted Attacks 🕴
📖 Read
via "Dark Reading: ".
Mozilla has released patches for the bug reported by Coinbase.📖 Read
via "Dark Reading: ".
Darkreading
Critical Firefox Vuln Used in Targeted Attacks
Mozilla has released patches for the bug reported by Coinbase.
🕴 With GDPR's 'Right of Access,' Who Really Has Access? 🕴
📖 Read
via "Dark Reading: ".
How a security researcher learned organizations willingly hand over sensitive data with little to no identity verification.📖 Read
via "Dark Reading: ".
Dark Reading
With GDPR's 'Right of Access,' Who Really Has Access?
How a security researcher learned organizations willingly hand over sensitive data with little to no identity verification.
❌ Feds: Cyberattack on NASA’s JPL Threatened Mission-Control Data ❌
📖 Read
via "Threatpost".
Rampant security-operations bungling allowed cyberattackers to infiltrate JPL's network, which carries human mission data.📖 Read
via "Threatpost".
Threat Post
Feds: Cyberattack on NASA’s JPL Threatened Mission-Control Data
Rampant security-operations bungling allowed cyberattackers to infiltrate JPL's network, which carries human mission data.
ATENTION‼ New - CVE-2017-14395
📖 Read
via "National Vulnerability Database".
Auth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access Management (AM) 5.0.0-5.1.1 does not correctly validate redirect_uri for some invalid requests, which allows attackers to execute a script in the user's browser via reflected XSS.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-14394
📖 Read
via "National Vulnerability Database".
OAuth 2.0 Authorization Server of ForgeRock Access Management (OpenAM) 13.5.0-13.5.1 and Access Management (AM) 5.0.0-5.1.1 does not correctly validate redirect_uri for some invalid requests, which allows attackers to perform phishing via an unvalidated redirect.📖 Read
via "National Vulnerability Database".
🕴 Inside the FBI's Fight Against Cybercrime 🕴
📖 Read
via "Dark Reading: ".
Heavily outnumbered and outpaced by their targets, small FBI cybersquads have been quietly notching up major wins against online criminals operating out of home and abroad.📖 Read
via "Dark Reading: ".
Darkreading
Inside the FBI's Fight Against Cybercrime
Heavily outnumbered and outpaced by their targets, small FBI cybersquads have been quietly notching up major wins against online criminals operating out of home and abroad.
⚠ “Deeply personal medical” records exposed online ⚠
📖 Read
via "Naked Security".
The Facebook ad agency xSocialMedia exposed 150K medical histories, along with identifying information for the people involved.📖 Read
via "Naked Security".
Naked Security
“Deeply personal medical” records exposed online
The Facebook ad agency xSocialMedia exposed 150K medical histories, along with identifying information for the people involved.
⚠ Facebook’s Libra cryptocurrency is big news but will it be secure? ⚠
📖 Read
via "Naked Security".
Unless you’ve been under a rock, you’ll know that earlier this week Facebook announced plans for a new global cryptocurrency for absolutely everyone called Libra.📖 Read
via "Naked Security".
Naked Security
Facebook’s Libra cryptocurrency is big news but will it be secure?
Unless you’ve been under a rock, you’ll know that earlier this week Facebook announced plans for a new global cryptocurrency for absolutely everyone called Libra.
🕴 The Hunt for Vulnerabilities 🕴
📖 Read
via "Dark Reading: ".
A road map for improving the update process will help reduce the risks from vulnerabilities.📖 Read
via "Dark Reading: ".
Dark Reading
The Hunt for Vulnerabilities
A road map for improving the update process will help reduce the risks from vulnerabilities.
🔐 Why tech was key to the KGB being good at espionage 🔐
📖 Read
via "Security on TechRepublic".
The KGB Espionage Museum's Agne Urbaityte explains various technologies and methods of eavesdropping used by the intelligence service, including Deadly Kiss and cameras in rings.📖 Read
via "Security on TechRepublic".
TechRepublic
Why tech was key to the KGB being good at espionage
The KGB Espionage Museum's Agne Urbaityte explains various technologies and methods of eavesdropping used by the intelligence service, including Deadly Kiss and cameras in rings.
🕴 Cybersecurity Accountability Spread Thin in the C-Suite 🕴
📖 Read
via "Dark Reading: ".
While cybersecurity discussions have permeated board meetings, the democratization of accountability has a long way to go.📖 Read
via "Dark Reading: ".
Dark Reading
Cybersecurity Accountability Spread Thin in the C-Suite
While cybersecurity discussions have permeated board meetings, the democratization of accountability has a long way to go.
🔐 How to respond to phishing emails: 6 steps for G Suite admins 🔐
📖 Read
via "Security on TechRepublic".
Here are steps G Suite administrators should take when a phishing email gets through to an account.📖 Read
via "Security on TechRepublic".
TechRepublic
How to respond to phishing emails: 6 steps for G Suite admins
Here are steps G Suite administrators should take when a phishing email gets through to an account.
🔐 How KGB agents were invisible spies 🔐
📖 Read
via "Security on TechRepublic".
Dan Patterson interviews the KGB Espionage Museum's Agne Urbaityte about how agents in the field would blend in with their environment in order to spy.📖 Read
via "Security on TechRepublic".
TechRepublic
How KGB agents were invisible spies
Dan Patterson interviews the KGB Espionage Museum's Agne Urbaityte about how agents in the field would blend in with their environment in order to spy.
⚠ Google launches new Chrome protection from bad URLs ⚠
📖 Read
via "Naked Security".
The "Suspicious Site Reporter" extension lets users easily report dubious sites, while a new warning flags potential typosquatting pages.📖 Read
via "Naked Security".
Naked Security
Google launches new Chrome protection from bad URLs
The “Suspicious Site Reporter” extension lets users easily report dubious sites, while a new warning flags potential typosquatting pages.
⚠ Update Firefox now! Zero-day found in the wild ⚠
📖 Read
via "Naked Security".
Mozilla has fixed a critical zero-day bug in the latest point releases of the Firefox web browser.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🔐 KGB agents' wearables: Watches, cufflinks, shoes, and more 🔐
📖 Read
via "Security on TechRepublic".
The KGB Espionage Museum's curator Agne Urbaityte describes how agents concealed spying devices in what they wore when working in the field.📖 Read
via "Security on TechRepublic".
TechRepublic
KGB agents' wearables: Watches, cufflinks, shoes, and more
The KGB Espionage Museum's curator Agne Urbaityte describes how agents concealed spying devices in what they wore when working in the field.