πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
⚠ Patch Android! July 2019 update fixes 9 critical flaws ⚠

Depending on when users receive it, this week’s Android’s July patch update will fix 33 security vulnerabilities, including 9 marked critical, and 24 marked high.

πŸ“– Read

via "Naked Security".
⚠ Miami police body cam videos up for sale on the darkweb ⚠

Videos from Miami Police Department body cams were leaked and stored in unprotected, internet-facing databases, then sold on the darkweb.

πŸ“– Read

via "Naked Security".
⚠ Georgia’s court system hit by ransomware ⚠

There's a hint that it might involve Ryuk ransomware. If so, it might be the fourth Ryuk attack against state and local agencies since May.

πŸ“– Read

via "Naked Security".
⚠ IoT vendor Orvibo gives away treasure trove of user and device data ⚠

Researchers at web privacy review service vpnMentor discovered the data in an exposed ElasticSearch server online. It contains two billion items of log data from devices sold by Shenzen, China-based smart IoT device manufacturer Orvibo.

πŸ“– Read

via "Naked Security".
πŸ•΄ TA505 Group Launches New Targeted Attacks πŸ•΄

Russian-speaking group has sent thousands of emails containing new malware to individuals working at financial institutions in the US, United Arab Emirates, and Singapore.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Black Hat Q&A: Understanding NSA's Quest to Open Source Ghidra πŸ•΄

National Security Agency researcher Brian Knighton previews his October Black Hat USA talk on the evolution of Ghidra.

πŸ“– Read

via "Dark Reading: ".
πŸ” UK Sees Steep Jump in Cyber Attacks on Financial Services Firms πŸ”

According to a regulator, retail banks in the region took the biggest hit last year.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
πŸ•΄ Disarming Employee Weaponization πŸ•΄

Human vulnerability presents a real threat for organizations. But it's also a remarkable opportunity to turn employees into our strongest cyber warriors.

πŸ“– Read

via "Dark Reading: ".
πŸ” DevOps will fail unless security and developer teams communicate better πŸ”

DevOps initiatives have become important for 74% of organizations over the past year, but communication must improve for DevOps to be successful, according to Trend Micro.

πŸ“– Read

via "Security on TechRepublic".
❌ Amazon Admits Alexa Voice Recordings Saved Indefinitely ❌

Amazon's acknowledgment that it saves Alexa voice recordings - even sometimes after consumers manually delete their interaction history - has thrust voice assistant privacy policies into the spotlight once again.

πŸ“– Read

via "Threatpost".
⚠ Serious Security: Beware eBay scrapers promising to help you with β€˜viral promotions’ ⚠

Selling items online? Watch our for people who suddenly offer to help!

πŸ“– Read

via "Naked Security".
πŸ” Amazon Prime Day, EA gaming service's vulnerabilities, and the basics of multicloud πŸ”

This week's TechRepublic and ZDNet news stories include the brand battle between Apple and Microsoft, Word documents containing malicious links, and the future of on-premises databases.

πŸ“– Read

via "Security on TechRepublic".
❌ Apple Transparency Report Now Includes App Store Takedown Requests ❌

Apple report now includes data on requests by governments to take down apps from the tech giant's app store.

πŸ“– Read

via "Threatpost".
πŸ” Tech news roundup: Amazon Prime Day, EA gaming service's vulnerabilities, and the basics of multicloud πŸ”

This week's TechRepublic and ZDNet news stories include the brand battle between Apple and Microsoft, Word documents containing malicious links, and the future of on-premises databases.

πŸ“– Read

via "Security on TechRepublic".
ATENTIONβ€Ό New - CVE-2018-11427

CSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior, which makes it possible to perform CSRF attacks on the device administrator.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-11426

A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication and access the web interface to use all its functions except for password change.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ 20 Questions to Ask During a Real (or Manufactured) Security Crisis πŸ•΄

There are important lessons to be learned from a crisis, even the ones that are more fiction than fact.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ More Than Half of SMB Devices Run Outdated Operating Systems πŸ•΄

66% of devices in small-to midsized businesses are based on expired or about-to-expire Microsoft OS versions, Alert Logic study found.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Sodin Ransomware Exploits Windows Privilege Escalation Bug πŸ•΄

Exploitation of CVE-2018-8453 grants attackers the highest level of privileges on a target system.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2017-9327

Secret data of processes managed by CM is not secured by file permissions.

πŸ“– Read

via "National Vulnerability Database".