⚠ BlueKeep guides make imminent public exploit more likely ⚠
📖 Read
via "Naked Security".
A public exploit for Microsoft's BlueKeep vulnerability is just days away. In fact, for those with deep pockets, it's already here.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 Black Hat Q&A: Inside the Black Hat NOC 🕴
📖 Read
via "Dark Reading: ".
Cybersecurity expert Bart Stump explains what it's like to reliably deliver a useful, high-security network for one of the toughest audiences in the world.📖 Read
via "Dark Reading: ".
Dark Reading
Black Hat Q&A: Inside the Black Hat NOC
Cybersecurity expert Bart Stump explains what it's like to reliably deliver a useful, high-security network for one of the toughest audiences in the world.
🕴 3 Takeaways from the First American Financial Breach 🕴
📖 Read
via "Dark Reading: ".
Data leaks from business logic flaws are not well understood and difficult to identify before they reach production environments. Here's how to find and prevent them.📖 Read
via "Dark Reading: ".
Darkreading
3 Takeaways from the First American Financial Breach
Data leaks from business logic flaws are not well understood and difficult to identify before they reach production environments. Here's how to find and prevent them.
ATENTION‼ New - CVE-2018-20857
📖 Read
via "National Vulnerability Database".
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!---->. and then the attacker's domain name.📖 Read
via "National Vulnerability Database".
🕴 Black Hat Q&A: Inside the Black Hat NOC 🕴
📖 Read
via "Dark Reading: ".
Cybersecurity expert Bart Stump explains what it's like to reliably deliver a useful, high-security network for one of the toughest audiences in the world.📖 Read
via "Dark Reading: ".
Dark Reading
Black Hat Q&A: Inside the Black Hat NOC
Cybersecurity expert Bart Stump explains what it's like to reliably deliver a useful, high-security network for one of the toughest audiences in the world.
🔐 66% of SMBs don't believe they are vulnerable to cyberattacks 🔐
📖 Read
via "Security on TechRepublic".
SMBs aren't prioritizing cybersecurity prevention strategies, even though they are at risk of attack, according to a Keeper Security report.📖 Read
via "Security on TechRepublic".
TechRepublic
66% of SMBs don't believe they are vulnerable to cyberattacks
SMBs aren't prioritizing cybersecurity prevention strategies, even though they are at risk of attack, according to a Keeper Security report.
⚠ Sysadmins need to know – how DO you pronounce “sudo”? ⚠
📖 Read
via "Naked Security".
We take on one of #SysAdminDay's thorny issues.📖 Read
via "Naked Security".
Naked Security
Sysadmins need to know – how DO you pronounce “sudo”?
We take on one of #SysAdminDay’s thorny issues.
🕴 FormGet Storage Bucket Leaks Passport Scans, Bank Details 🕴
📖 Read
via "Dark Reading: ".
Exposed files include mortgage and loan information, passport and driver's license scans, internal corporate files, and shipping labels.📖 Read
via "Dark Reading: ".
Dark Reading
FormGet Storage Bucket Leaks Passport Scans, Bank Details
Exposed files include mortgage and loan information, passport and driver's license scans, internal corporate files, and shipping labels.
🔏 Friday Five: 7/26 Edition 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
News about a new phishing campaign targeting Office 365 admins, the FTC's big Facebook fine, and the latest data breach statistics are all covered in this week's Friday Five.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five: 7/26 Edition
News about a new phishing campaign targeting Office 365 admins, the FTC's big Facebook fine, and the latest data breach statistics are all covered in this week's Friday Five.
ATENTION‼ New - CVE-2018-17210 (central_print_services)
📖 Read
via "National Vulnerability Database".
An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass the session checks (that would otherwise logout a low-privileged user) by calling the core print job components directly via crafted HTTP GET and POST requests.📖 Read
via "National Vulnerability Database".
❌ ‘Google’ Sites Are the Latest Ploy by Card-Skimming Thieves ❌
📖 Read
via "Threatpost".
A credit-card skimmer on Magento sites was found loading JavaScript from a legitimate-seeming Google Analytics domain.📖 Read
via "Threatpost".
Threat Post
‘Google’ Sites Are the Latest Ploy by Card-Skimming Thieves
A credit-card skimmer on Magento sites was found loading JavaScript from a legitimate-seeming Google Analytics domain.
🕴 Companies' 'Anonymized' Data May Violate GDPR, Privacy Regs 🕴
📖 Read
via "Dark Reading: ".
New study found that any database containing 15 pieces of demographic data could be used to identify individuals.📖 Read
via "Dark Reading: ".
Dark Reading
Companies' 'Anonymized' Data May Violate GDPR, Privacy Regs
New study found that any database containing 15 pieces of demographic data could be used to identify individuals.
🕴 Complete Personal Fraud Kits Sell for Less Than $40 on Dark Web 🕴
📖 Read
via "Dark Reading: ".
The low cost of records reflects the huge supply of PII after many breaches at hospitals, government agencies, and credit bureaus.📖 Read
via "Dark Reading: ".
Dark Reading
Complete Personal Fraud Kits Sell for Less Than $40 on Dark Web
The low cost of records reflects the huge supply of PII after many breaches at hospitals, government agencies, and credit bureaus.
❌ Gamers Are Easy Prey for Credential Thieves ❌
📖 Read
via "Threatpost".
Gamers are easy pickings for credential crooks, thanks to lax security hygiene and poor gaming company practices.📖 Read
via "Threatpost".
Threat Post
Gamers Are Easy Prey for Credential Thieves
Gamers are easy pickings for credential crooks, thanks to lax security hygiene and poor gaming company practices.
❌ Rare Steganography Hack Can Compromise Fully Patched Websites ❌
📖 Read
via "Threatpost".
Attackers are hiding PHP scripts in EXIF headers of JPEG images to hack websites, just by uploading an image.📖 Read
via "Threatpost".
Threat Post
Rare Steganography Hack Can Compromise Fully Patched Websites
Attackers are hiding PHP scripts in EXIF headers of JPEG images to hack websites, just by uploading an image.
🕴 Malware Researcher Hutchins Sentenced to Supervised Release 🕴
📖 Read
via "Dark Reading: ".
Marcus Hutchins, the researcher known for stopping WannaCry, avoids jail time over charges of creating and distributing Kronos malware.📖 Read
via "Dark Reading: ".
Darkreading
Malware Researcher Hutchins Sentenced to Supervised Release
Marcus Hutchins, the researcher known for stopping WannaCry, avoids jail time over charges of creating and distributing Kronos malware.
❌ Louisiana Gov Declares Emergency After Cyberattacks Plague Schools ❌
📖 Read
via "Threatpost".
Attacks on at least three school districts and likely others have prompted the state's first emergency due to cyberattack.📖 Read
via "Threatpost".
Threat Post
Louisiana Gov Declares Emergency After Cyberattacks Plague Schools
Attacks on at least three school districts and likely others have prompted the state's first emergency due to cyberattack.
⚠ WannaCry hero gets off lightly, avoids prison – was justice done? ⚠
📖 Read
via "Naked Security".
Wrote malware for money, went straight, got busted, didn't go to prison. Has US cybercrime enforcement gone soft?📖 Read
via "Naked Security".
Naked Security
WannaCry hero avoids prison
Marcus Hutchins, known as @MalwareTechBlog on Twitter, has been spared jail over malware charges. British-born Hutchins, who was credited with creating a “kill switch” for WannaCry, was arrested in…
ATENTION‼ New - CVE-2017-18379
📖 Read
via "National Vulnerability Database".
In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c.📖 Read
via "National Vulnerability Database".