πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
⚠ Stop facial recognition trials now, warns UK committee ⚠

The UK government should suspend trials of automatic facial recognition systems until it can meet regulators’ concerns about the technology, according to a report released Friday.

πŸ“– Read

via "Naked Security".
⚠ Hacked Bulgarian database reaches online forums ⚠

Data on millions of people stolen from the Bulgarian government has already popped up on hacker trading forums.

πŸ“– Read

via "Naked Security".
⚠ Chrome 76 blocks websites from detecting incognito mode ⚠

Ever bypassed a website paywall using a browser’s privacy mode? It was once a simple hack, however, it no longer works for most websites.

πŸ“– Read

via "Naked Security".
πŸ•΄ 6 Actions that Made GDPR Real in 2019 πŸ•΄

In the wake of recent fines levied against British Airways, Marriott, and Facebook, companies are starting to take data privacy and security more seriously.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ CISO Pressures: Why the Role Stinks and How to Fix It πŸ•΄

CISOs spend much less time in their role than other members of the boardroom. It's a serious problem that must be addressed.

πŸ“– Read

via "Dark Reading: ".
❌ Equifax to Pay $700 Million in 2017 Data Breach Settlement ❌

Equifax will dish out as much as $700 million on the heels of its infamous 2017 data breach that impacted 150 million customers.

πŸ“– Read

via "Threatpost".
πŸ•΄ Ex-NSA Contractor Gets 9 Years for Retaining Defense Data πŸ•΄

Law enforcement recovered two decades' worth of stolen material from the home and car of former government contractor Harold Martin.

πŸ“– Read

via "Dark Reading: ".
πŸ” 4 ways to avoid malware on Android πŸ”

Users can avoid malware on their Android devices if they follow four, easy tips.

πŸ“– Read

via "Security on TechRepublic".
❌ Large-Scale Government Hacks Hit Russia, Bulgaria ❌

The Bulgarian attack impacted almost tax information for the entire country.

πŸ“– Read

via "Threatpost".
πŸ” 40% of enterprises experienced Office 365 credential theft, report finds πŸ”

While 80% of organizations use more than the default security provided by Office 365, additional measures are needed to secure enterprise email.

πŸ“– Read

via "Security on TechRepublic".
ATENTIONβ€Ό New - CVE-2018-2024

IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 155350.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-13927

Debug policy with invalid signature can be loaded when the debug policy functionality is disabled by using the parallel image loading in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCS404, QCS605, SD 410/12, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SXR1130

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-13924

Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA6174A, QCA8081, QCS404, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2018-13896

XBL_SEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to missing lock at XBL_SEC stage.. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCS404, QCS605, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

πŸ“– Read

via "National Vulnerability Database".
❌ Amazon Alexa, Google Home On Collision Course With Regulation ❌

Threatpost talks to Tim Mackey with Synopsys about recent Amazon Echo and Google Home privacy faux pas. Will GDPR and other regulations catch up to the voice assistants?

πŸ“– Read

via "Threatpost".
πŸ•΄ Firmware Vulnerabilities Show Supply Chain Risks πŸ•΄

A recently announced pair of vulnerabilities in server firmware could put enterprise IT at risk.

πŸ“– Read

via "Dark Reading: ".
πŸ” Equifax to Pay Upwards of $700 Million in Data Breach Settlement πŸ”

Once approved, the settlement will be the largest ever paid by a company over a data breach.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
❌ Tackling the Collaboration Conundrum ❌

Enterprises should recognize the data security risk that Slack, Teams or TeamViewer could introduce and address it.

πŸ“– Read

via "Threatpost".
❌ Critical RCE Flaw in Palo Alto Gateways Hits Uber ❌

The bug is previously unknown but yet still fixed in later releases. However, many organizations are likely still vulnerable.

πŸ“– Read

via "Threatpost".
πŸ•΄ How Cybercriminals Break into the Microsoft Cloud πŸ•΄

Microsoft and Trimarc researchers explore the most common attacks against the cloud and effective defenses and mitigation.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Equifax to Pay Up to $700mn for Data Breach Damages πŸ•΄

In a settlement with the FTC, consumers affected by the breach are eligible for up to $20,000 in a cash settlement, depending on damages they can prove.

πŸ“– Read

via "Dark Reading: ".