🕴 Senate Report: US Election Security 'Sorely Lacking' in 2016 🕴
📖 Read
via "Dark Reading: ".
Senate Intelligence Committee report released today cites weaknesses, but finds no evidence of vote-tampering.📖 Read
via "Dark Reading: ".
Dark Reading
Cyberattacks & Data Breaches recent news | Dark Reading
Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading
ATENTION‼ New - CVE-2019-0202
📖 Read
via "National Vulnerability Database".
The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versions 0.9.1-incubating to 1.2.2, it is possible to read files off the host's file system that were not intended to be accessible via these endpoints.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-11779
📖 Read
via "National Vulnerability Database".
In Apache Storm versions 1.1.0 to 1.2.2, when the user is using the storm-kafka-client or storm-kafka modules, it is possible to cause the Storm UI daemon to deserialize user provided bytes into a Java class.📖 Read
via "National Vulnerability Database".
⚠ S2 Ep1: FaceApp, logic bombs and stranger danger – Naked Security Podcast ⚠
📖 Read
via "Naked Security".
We’re finally back with Series 2 of the Naked Security Podcast. While you’ve been missing us, we’ve been working out how to improve the show and kitting out a dedicated studio. You’ll now find longer episodes with more opportunities to get involved. Send us your general cybersecurity questions and join the discussion via social media […]📖 Read
via "Naked Security".
Naked Security
S2 Ep1: FaceApp, logic bombs and stranger danger – Naked Security Podcast
We’re finally back with Series 2 of the Naked Security Podcast. Listen now!
⚠ Browser plug-ins peddled personal data from over 4m browsers ⚠
📖 Read
via "Naked Security".
Nacho Analytics gathered data like passwords, tax and prescription data from browser add-ons - and those who bought it can keep it.📖 Read
via "Naked Security".
Naked Security
Browser plug-ins peddled personal data from over 4m browsers
Nacho Analytics gathered data like passwords, tax and prescription data from browser add-ons – and those who bought it can keep it.
ATENTION‼ New - CVE-2018-20856
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-after-free because a certain error case is mishandled.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-20855
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-20854
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Linux kernel before 4.20. drivers/phy/mscc/phy-ocelot-serdes.c has an off-by-one error with a resultant ctrl->phys out-of-bounds read.📖 Read
via "National Vulnerability Database".
🕴 What Every Security Team Should Know About Internet Threats 🕴
📖 Read
via "Dark Reading: ".
Of particular interest for cybercriminals is the Domain Name System, which plays a central role in orchestrating all Internet and application traffic.📖 Read
via "Dark Reading: ".
Dark Reading
What Every Security Team Should Know About Internet Threats
Of particular interest for cybercriminals is the Domain Name System, which plays a central role in orchestrating all Internet and application traffic.
⚠ BlueKeep guides make imminent public exploit more likely ⚠
📖 Read
via "Naked Security".
A public exploit for Microsoft's BlueKeep vulnerability is just days away. In fact, for those with deep pockets, it's already here.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 Black Hat Q&A: Inside the Black Hat NOC 🕴
📖 Read
via "Dark Reading: ".
Cybersecurity expert Bart Stump explains what it's like to reliably deliver a useful, high-security network for one of the toughest audiences in the world.📖 Read
via "Dark Reading: ".
Dark Reading
Black Hat Q&A: Inside the Black Hat NOC
Cybersecurity expert Bart Stump explains what it's like to reliably deliver a useful, high-security network for one of the toughest audiences in the world.
🕴 3 Takeaways from the First American Financial Breach 🕴
📖 Read
via "Dark Reading: ".
Data leaks from business logic flaws are not well understood and difficult to identify before they reach production environments. Here's how to find and prevent them.📖 Read
via "Dark Reading: ".
Darkreading
3 Takeaways from the First American Financial Breach
Data leaks from business logic flaws are not well understood and difficult to identify before they reach production environments. Here's how to find and prevent them.
ATENTION‼ New - CVE-2018-20857
📖 Read
via "National Vulnerability Database".
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!---->. and then the attacker's domain name.📖 Read
via "National Vulnerability Database".
🕴 Black Hat Q&A: Inside the Black Hat NOC 🕴
📖 Read
via "Dark Reading: ".
Cybersecurity expert Bart Stump explains what it's like to reliably deliver a useful, high-security network for one of the toughest audiences in the world.📖 Read
via "Dark Reading: ".
Dark Reading
Black Hat Q&A: Inside the Black Hat NOC
Cybersecurity expert Bart Stump explains what it's like to reliably deliver a useful, high-security network for one of the toughest audiences in the world.
🔐 66% of SMBs don't believe they are vulnerable to cyberattacks 🔐
📖 Read
via "Security on TechRepublic".
SMBs aren't prioritizing cybersecurity prevention strategies, even though they are at risk of attack, according to a Keeper Security report.📖 Read
via "Security on TechRepublic".
TechRepublic
66% of SMBs don't believe they are vulnerable to cyberattacks
SMBs aren't prioritizing cybersecurity prevention strategies, even though they are at risk of attack, according to a Keeper Security report.
⚠ Sysadmins need to know – how DO you pronounce “sudo”? ⚠
📖 Read
via "Naked Security".
We take on one of #SysAdminDay's thorny issues.📖 Read
via "Naked Security".
Naked Security
Sysadmins need to know – how DO you pronounce “sudo”?
We take on one of #SysAdminDay’s thorny issues.
🕴 FormGet Storage Bucket Leaks Passport Scans, Bank Details 🕴
📖 Read
via "Dark Reading: ".
Exposed files include mortgage and loan information, passport and driver's license scans, internal corporate files, and shipping labels.📖 Read
via "Dark Reading: ".
Dark Reading
FormGet Storage Bucket Leaks Passport Scans, Bank Details
Exposed files include mortgage and loan information, passport and driver's license scans, internal corporate files, and shipping labels.
🔏 Friday Five: 7/26 Edition 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
News about a new phishing campaign targeting Office 365 admins, the FTC's big Facebook fine, and the latest data breach statistics are all covered in this week's Friday Five.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five: 7/26 Edition
News about a new phishing campaign targeting Office 365 admins, the FTC's big Facebook fine, and the latest data breach statistics are all covered in this week's Friday Five.
ATENTION‼ New - CVE-2018-17210 (central_print_services)
📖 Read
via "National Vulnerability Database".
An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass the session checks (that would otherwise logout a low-privileged user) by calling the core print job components directly via crafted HTTP GET and POST requests.📖 Read
via "National Vulnerability Database".