πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
❌ Tor Browser Issues Update for Critical System Takeover Flaw ❌

The update patches critical flaw (CVE-2019-11707), a type confusion vulnerability in the Mozilla Firefox code that Tor uses.

πŸ“– Read

via "Threatpost".
πŸ•΄ 7 2019 Security Venture Fund Deals You Should Know πŸ•΄

2019 has, so far, been a busy year for venture capitalists in the security industry. Here are 7 funding rounds important because of the technologies or market trends they represent.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Machine Learning Boosts Defenses, But Security Pros Worry Over Attack Potential πŸ•΄

As defenders increasingly use machine learning to remove spam, catch fraud, and block malware, concerns persist that attackers will find ways to use AI technology to their advantage.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2017-17944

The ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Small Businesses May Not Be Security's Weak Link πŸ•΄

Organizations with 250 or fewer employees often employ a higher percentage of security pros than their larger counterparts.

πŸ“– Read

via "Dark Reading: ".
❌ DanaBot Adds Ransomware to its Arsenal ❌

Malware adds ransomware to its malicious bag of tricks.

πŸ“– Read

via "Threatpost".
πŸ•΄ 'Democratizing' Machine Learning for Fraud Prevention & Payments Intelligence πŸ•΄

How fraud experts can fight cybercrime by 'downloading' their knowledge and experience into computer models.

πŸ“– Read

via "Dark Reading: ".
πŸ” Firefox Users Urged to Patch Zero Day Following Attack πŸ”

The zero day - which was actually two zero days chained together - was used in attacks against a popular cryptocurrency exchange on Monday.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
πŸ” How KGB agents were invisible spies πŸ”

Dan Patterson interviews the KGB Espionage Museum's Agne Urbaityte about how agents in the field would blend in with their environment in order to spy.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Florida City Ransom Payment Could Open Door to More Attacks πŸ•΄

Riviera Beach's decision to pay ransom to criminals might get files back, but it almost guarantees greater attacks against other governments.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Florida Town Pays $600K to Ransomware Operators πŸ•΄

Riviera Beach's decision to pay ransom to criminals might get files back, but it almost guarantees greater attacks against other governments.

πŸ“– Read

via "Dark Reading: ".
❌ LoudMiner Cryptominer Uses Linux Image and Virtual Machines ❌

A Tiny Core Linux 9.0 image configured to run XMRig runs on a VM, rather than victim machines hosting the malware locally.

πŸ“– Read

via "Threatpost".
❌ Post-Ransomware Attack, Florida City Pays $600K ❌

Riviera Beach, a Florida city, is coughing up $600,000 to hackers after a ransomware attack brought down its computer systems.

πŸ“– Read

via "Threatpost".
❌ Match, Tinder Swipe Right For Privacy Red Flags, Say Experts ❌

Analysts at ProPrivacy say the dating apps collect everything from chat content to financial data on their users -- and then they share it.

πŸ“– Read

via "Threatpost".
πŸ•΄ Attackers Exploit MSP's Tools to Distribute Ransomware πŸ•΄

Early information suggests threat actors gained access to the managed service provider's remote monitoring and management tools and used them to attack the firm's clients.

πŸ“– Read

via "Dark Reading: ".
⚠ Government is exposing identities of child abuse victims ⚠

DHS and FBI investigators are using Facebook profile IDs in court records - IDs that are easily used to look up their profile pages.

πŸ“– Read

via "Naked Security".
⚠ Florida city will pay over $600,000 to ransomware attackers ⚠

Riviera Beach, Florida, has agreed to pay attackers over $600,000 three weeks after its systems were crippled by ransomware.

πŸ“– Read

via "Naked Security".
❌ Millions of Dell PCs Vulnerable to Flaw in Third-Party Component ❌

A component in SupportAssist software pre-installed on Dell PCs - and other OEM devices - opens systems up to DLL hijacking attacks.

πŸ“– Read

via "Threatpost".
πŸ” OEM diagnostic software used by Dell and other manufacturers has a serious security flaw πŸ”

SupportAssist, which comes pre-installed on millions of Dell PCs, is based on a platform called PC-Doctor, and it can be abused to give attackers system-level access to hardware and software.

πŸ“– Read

via "Security on TechRepublic".
⚠ Used Nest cams were letting previous owners spy on you ⚠

Google says it's fixed the issue, but we haven't heard details on how many, and which, products were affected.

πŸ“– Read

via "Naked Security".
πŸ•΄ Attackers Exploit MSP's Tools to Distribute Ransomware πŸ•΄

Early information suggests threat actors gained access to the managed service provider's remote monitoring and management tools and used them to attack the firm's clients.

πŸ“– Read

via "Dark Reading: ".