πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
❌ Threatpost New Wrap Podcast For Oct. 5 ❌

Threatpost editors discuss the highlights and biggest breaking news from this past week.

πŸ“– Read

via "The first stop for security news | Threatpost ".
❌ D-Link Patches RCE Bugs in Wireless Access Point Gear ❌

 D-Link has released the beta version of the controller which addresses the reported vulnerabilities.

πŸ“– Read

via "The first stop for security news | Threatpost ".
πŸ•΄ Successful Scammers Call After Lunch πŸ•΄

Analysis of 20,000 voice phishing, or vishing, calls reveals patterns in how hackers operate.

πŸ“– Read

via "Dark Reading: ".
❌ Virus Bulletin 2018: Saudi Dissident Spyware Attack Belies Bigger Threat ❌

A spyware attack on a Saudi dissident living in Canada made headlines this week, but Citizen Lab warns that simpler attacks are the real epidemic.

πŸ“– Read

via "The first stop for security news | Threatpost ".
πŸ•΄ Most Home Routers Are Full of Vulnerabilities πŸ•΄

More than 80% of surveyed routers had, on average, 172 security vulnerabilities, new research shows.

πŸ“– Read

via "Dark Reading: ".
❌ Sony Smart TV Bug Allows Remote Access, Root Privileges ❌

Software patching becomes a new reality for smart TV owners.

πŸ“– Read

via "The first stop for security news | Threatpost ".
πŸ•΄ Mandia: Tipping Point Now Here for Rules of Cyber Engagement πŸ•΄

FireEye CEO and nation-state hacking expert Kevin Mandia says Russia began changing the game in 2015.

πŸ“– Read

via "Dark Reading: ".
πŸ” Cybersecurity investments: Why ROI calculations may not tell the whole story πŸ”

Cybersecurity spends are about loss prevention not earnings, suggests security expert Bruce Schneier. Thankfully, there are better options to ensure cybersecurity investments are maximized.

πŸ“– Read

via "Security on TechRepublic".
ATENTIONβ€Ό New - CVE-2015-9273

The wp-slimstat (aka Slimstat Analytics) plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2012-6710

ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to index.php.

πŸ“– Read

via "National Vulnerability Database".
❌ PoC Attack Escalates MikroTik Router Bug to β€˜As Bad As It Gets’ ❌

Researchers say a medium severity bug should now be rated critical because of a new hack technique that allows for remote code execution on MikroTik edge and consumer routers.

πŸ“– Read

via "The first stop for security news | Threatpost ".
⚠ Monday review – the hot 19 stories of the week ⚠

From the iOS lockscreen bypass to Facebook using your 2FA phone number to target market you, and everything we wrote in between. Catch up with the news from the last seven days - it's weekly roundup time.

πŸ“– Read

via "Naked Security".
⚠ Seven Russian cyberspies indicted for hacking, wire fraud, ID theft ⚠

"Bungling" Russian GRU operatives picked up by Dutch police, linked to OPCW and World Anti-Doping Agency hacks.

πŸ“– Read

via "Naked Security".
⚠ Fitbit data leads to arrest of 90-year-old in stepdaughter’s murder ⚠

Her device recorded her heart rate slowing rapidly, then stopping about five minutes before her stepfather left the house.

πŸ“– Read

via "Naked Security".
⚠ Attackers use voicemail hack to steal WhatsApp accounts ⚠

The Israeli National Cybersecurity Authority issued an alert warning that WhatsApp users could lose control of their accounts.

πŸ“– Read

via "Naked Security".
⚠ Phantom Secure CEO sold encrypted phones to drug cartels ⚠

The CEO of β€œuncrackable” phone seller, Phantom Secure, has pleaded guilty to helping drug sellers keep their business locked away from the eyes of law enforcement.

πŸ“– Read

via "Naked Security".
πŸ•΄ Teach Your AI Well: A Potential New Bottleneck for Cybersecurity πŸ•΄

Artificial intelligence (AI) holds the promise of easing the skills shortage in cybersecurity, but implementing AI may result in a talent gap of its own for the industry.

πŸ“– Read

via "Dark Reading: ".
πŸ” 5 tips to secure your supply chain from cyberattacks πŸ”

It's nearly impossible to secure supply chains from attacks like the alleged Chinese chip hack that was reported last week. But here are some tips to protect your company.

πŸ“– Read

via "Security on TechRepublic".
⚠ Unpatched routers bad, doubly unpatched routers worse – much, much worse! ⚠

Two bugs can be four times the trouble! If you missed the last Microtik router patch, you're at risk, but if you're *two* patches behind ...

πŸ“– Read

via "Naked Security".
ATENTIONβ€Ό New - CVE-2016-7475

Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles.

πŸ“– Read

via "National Vulnerability Database".
❔ You’ve Been Hit By Ransomware. Now What? ❔

Estimated reading time: 3 minutesβ€œALL YOUR FILES HAVE BEEN ENCRYPTED”   You see that line flashing on your laptop or desktop and suddenly your adrenaline level shoots up with hundreds of questions already hitting your mind… How Do I Remove that Message? Why Can’t I Access My System? Will I Lose All My Work? Whom Should I Approach For Help?   Well, instead of entering the panic mode and instantly jumping on to Google for a quick help, it’s better to keep your calm and simply follow these simple steps: Disconnect From All Connected Systems – In case your system is connected to a Wi-Fi network or external drive, then the very first thing you can do is to disconnect your infected system from all of these. This may save the ransomware from spreading to other connected networks and devices since most cyberattacks spread from connected systems. Capture A Pic – Use a camera or smartphone to click a pic of the ransom note visible on your screen, as you may need it for making a police complaint later. Capture a screenshot of the ransomware screen if your system allows you to do so. Do A Quick Research – Once you have taken the few initial steps to isolate your infected system from other connected systems and collected some proofs, you can then invest some time in doing a quick research. Most often the ransom notes are transparent and contain the name of the ransomware along with an email address. However, at times there may be no name for the ransomware and there are huge chances that it may be a total bluff. At such times, it can prove really handy to do a little research on the name of the ransomware, to confirm its authenticity. Contact The Law Enforcement – Since, ransomware hacking is a big time crime, you can and should contact your local law enforcement agency to report the incidence. The best people to approach however, are the specialized cybercrime cells and cyber police stations available in most states, for handling cybercrime issues. These cells may be available in the form of Serious Fraud Investigation Office, Economic Offence Wing or State CID Department. Reboot To Safety – Before you try rebooting your system, be absolutely determined about not paying the ransom amount under the temptation of recovering your files. Once you have made up your mind, reboot your system into β€œSafe Mode” simply by holding the S key on your keyboard and pressing the power button at the same time. Try Recovering Deleted Files – The way most of the encrypting ransomware work, is they make copies of your files, encrypt these copies and then simply delete the original files. At times, there are major chances of recovering the original deleted files using free or paid file recovery tools. Who knows, you may just be lucky enough to get back your files!! Look For Decryption Tools – Just in case you have an idea about the ransomware strain, simply check out the list of decryption tools available on web. Quick Heal is quick to assist at such critical times by releasing the decryption key publicly on our website or blog, as soon as our security lab professionals are through with decryption. We have done this in the past with decryption tools for CrySiS/XTBL Ransomware, TeslaCrypt Ransomware and more. So, regardless of the frustration we may go through as a result of these cyber-attacks, the truth is that these ransomware and malware are here to stay. Thus, instead of panicking about them, it’s better to fight back and simply update our security systems, to be well prepared for any future attacks.   The post You’ve Been Hit By Ransomware. Now What? appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.

πŸ“– Read

via "Quick Heal Blog | Latest computer security news, tips, and advice".