⚠ Update your iPhone – remote control holes revealed by researchers ⚠
📖 Read
via "Naked Security".
You might not think your phone is as exposed as an internet server - but it's handling plenty of untrusted data from unknown sources!📖 Read
via "Naked Security".
Naked Security
Update your iPhone – remote control holes revealed by researchers
You might not think your phone is as exposed as an internet server – but it’s handling plenty of untrusted data from unknown sources!
❌ Researchers Bypass Apple FaceID Using Biometrics ‘Achilles Heel’ ❌
📖 Read
via "Threatpost".
Researchers were able to bypass Apple's FaceID using a pair of glasses with tape on the lenses.📖 Read
via "Threatpost".
Threat Post
Researchers Bypass Apple FaceID Using Biometrics ‘Achilles Heel’
Researchers were able to bypass Apple's FaceID using a pair of glasses with tape on the lenses.
🔐 Huawei doesn't see open source as the fix for spying accusations (but they should) 🔐
📖 Read
via "Security on TechRepublic".
The closed-source, opaque operation of network equipment makes spying accusations difficult to disprove. This could be solved by opening the software stack, but Huawei CSO Andy Purdy disagrees.📖 Read
via "Security on TechRepublic".
TechRepublic
Huawei doesn't see open source as the fix for spying accusations (but they should)
The closed-source, opaque operation of network equipment makes spying accusations difficult to disprove. This could be solved by opening the software stack, but Huawei CSO Andy Purdy disagrees.
ATENTION‼ New - CVE-2014-8184 (liblouis)
📖 Read
via "National Vulnerability Database".
A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable() in liblouis. An attacker could create a malicious file that would cause applications that use liblouis (such as Orca) to crash, or potentially execute arbitrary code when opened.📖 Read
via "National Vulnerability Database".
🕴 Siemens S7 PLCs Share Same Crypto Key Pair, Researchers Find 🕴
📖 Read
via "Dark Reading: ".
Researchers at Black Hat USA reveal how security authentication weaknesses in popular Siemens ICS family let them control a PLC.📖 Read
via "Dark Reading: ".
Dark Reading
Siemens S7 PLCs Share Same Crypto Key Pair, Researchers Find
Researchers at Black Hat USA reveal how security authentication weaknesses in popular Siemens ICS family let them control a PLC.
❌ Critical RCE Bug Found Lurking in Avaya VoIP Phones ❌
📖 Read
via "Threatpost".
The vulnerability is a decade old with a public exploit, yet remained unpatched in one of the phone giant's most popular models.📖 Read
via "Threatpost".
Threat Post
Critical RCE Bug Found Lurking in Avaya VoIP Phones
The vulnerability is a decade old with a public exploit, yet remained unpatched in one of the phone giant's most popular models.
❌ Black Hat 2019: Addressing Supply-Chain Risk Starts with People, Microsoft Says ❌
📖 Read
via "Threatpost".
LAS VEGAS – Supply-chain attacks have nabbed headlines lately thanks to high-profile incidents like the Wipro news last April, where attackers were able to compromise the staffing agency’s network and pivot to their customers. That incident pointed out that supply-chain risk should be thought of in a much more holistic fashion than it usually is, […]📖 Read
via "Threatpost".
Threat Post
Black Hat 2019: Addressing Supply-Chain Risk Starts with People, Microsoft Says
Hardware, software, services and people make up supply-chain risk — but the latter should be the guiding focus.
❌ State Farm Falls Victim to Credential-Stuffing Attack ❌
📖 Read
via "Threatpost".
The insurance giant serves at least 83 million U.S. households.📖 Read
via "Threatpost".
Threat Post
State Farm Falls Victim to Credential-Stuffing Attack
The insurance giant serves at least 83 million U.S. households.
🔏 Using GDPR Subject Access Requests to Harvest Data 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
In a talk at this year's Black Hat an Oxford University student explained how he used GDPR Access Requests and a Python script to steal a slew of sensitive information on another person.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Using GDPR Subject Access Requests to Harvest Data
In a talk at this year's Black Hat an Oxford University student explained how he used GDPR Access Requests and a Python script to steal a slew of sensitive information on another person.
🕴 Ransomware Shifts Focus from Consumers to Businesses 🕴
📖 Read
via "Dark Reading: ".
In addition, ransomware seems likely to continue its evolution in the second half of 2019.📖 Read
via "Dark Reading: ".
Darkreading
Ransomware Shifts Focus from Consumers to Businesses
In addition, ransomware seems likely to continue its evolution in the second half of 2019.
ATENTION‼ New - CVE-2015-9292
📖 Read
via "National Vulnerability Database".
6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).📖 Read
via "National Vulnerability Database".
🕴 How Behavioral Data Shaped a Security Training Makeover 🕴
📖 Read
via "Dark Reading: ".
A new program leveraged behavioral data of employees to determine when they excelled at security and where they needed improvement.📖 Read
via "Dark Reading: ".
Dark Reading
How Behavioral Data Shaped a Security Training Makeover
A new program leveraged behavioral data of employees to determine when they excelled at security and where they needed improvement.
🕴 Equifax CISO: 'Trust Starts and Ends with You' 🕴
📖 Read
via "Dark Reading: ".
Organizational culture is key to good enterprise security posture, Jamil Farshchi told Black Hat attendees.📖 Read
via "Dark Reading: ".
Darkreading
Equifax CISO: 'Trust Starts and Ends with You'
Organizational culture is key to good enterprise security posture, Jamil Farshchi told Black Hat attendees.
❌ Apple Upgrades Bug Bounty Program: Adds Macs, $1M Reward ❌
📖 Read
via "Threatpost".
Apple is opening its once-private bug bounty program to all researchers, as well as boosting vulnerability payouts and expanding the product scope to include MacOS.📖 Read
via "Threatpost".
Threat Post
Apple Upgrades Bug Bounty Program: Adds Macs, $1M Reward
Apple is opening its once-private bug bounty program to all researchers, as well as boosting vulnerability payouts and expanding the product scope to include MacOS.
🔐 Black Hat 2019: Social media influence campaigns, ATM hacking, and big business 🔐
📖 Read
via "Security on TechRepublic".
TechRepublic's Karen Roby interviews Dan Patterson about the top trends at the Black Hat USA 2019 cybersecurity conference.📖 Read
via "Security on TechRepublic".
TechRepublic
Black Hat 2019 trends: Social media influence campaigns, big business, ATM hacking
TechRepublic's Karen Roby interviews Dan Patterson about the top trends at the Black Hat USA 2019 cybersecurity conference.
🔐 Black Hat 2019 trends: Social media influence campaigns, big business, ATM hacking 🔐
📖 Read
via "Security on TechRepublic".
TechRepublic's Karen Roby interviews Dan Patterson about the top trends at the Black Hat USA 2019 cybersecurity conference.📖 Read
via "Security on TechRepublic".
TechRepublic
Black Hat 2019 trends: Social media influence campaigns, big business, ATM hacking
TechRepublic's Karen Roby interviews Dan Patterson about the top trends at the Black Hat USA 2019 cybersecurity conference.
🔐 Microsoft's new vulnerability tracking service is about IT productivity 🔐
📖 Read
via "Security on TechRepublic".
With so many threats and vulnerabilities to deal with, just knowing which actions you should prioritize can be hard. The new Threat & Vulnerability Management service from Microsoft should help.📖 Read
via "Security on TechRepublic".
⚠ Your Skype Translator calls may be heard by humans ⚠
📖 Read
via "Naked Security".
A Skype Translator insider claims it's good because humans are listening in and helping to train its artificial intelligence.📖 Read
via "Naked Security".
Naked Security
Your Skype Translator calls may be heard by humans
A Skype Translator insider claims it’s good because humans are listening in and helping to train its artificial intelligence.
❌ Election Security Threats: From Misinformation to Voting Machine Flaws ❌
📖 Read
via "Threatpost".
From insecure voting machines to social media misinformation, governments have alot to think about when it comes to securing elections.📖 Read
via "Threatpost".
Threat Post
Election Security Threats: From Misinformation to Voting Machine Flaws
From insecure voting machines to social media misinformation, governments have alot to think about when it comes to securing elections.
⚠ Parents, it’s time to delete Pet Chat from your child’s LeapPad ⚠
📖 Read
via "Naked Security".
LeapFrog has done lots to fix the security of the LeapPad. Now all that's left is for parents to scrape Pet Chat off of older tablets.📖 Read
via "Naked Security".
Naked Security
Parents, it’s time to delete Pet Chat from your child’s LeapPad
LeapFrog has done lots to fix the security of the LeapPad. Now all that’s left is for parents to scrape Pet Chat off of older tablets.
⚠ Instagram boots ad partner for location tracking and scraping stories ⚠
📖 Read
via "Naked Security".
A “preferred Facebook Marketing Partner” is alleged to have tracked millions of Instagram users' locations and stories.📖 Read
via "Naked Security".
Naked Security
Instagram boots ad partner for location tracking and scraping stories
A “preferred Facebook Marketing Partner” is alleged to have tracked millions of Instagram users’ locations and stories.