πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
ATENTIONβ€Ό New - CVE-2015-9315

The newstatpress plugin before 1.0.1 for WordPress has SQL injection.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9314

The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9313

The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9312

The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9311

The newstatpress plugin before 1.0.6 for WordPress has reflected XSS.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ GitHub Named in Capital One Breach Lawsuit πŸ•΄

A new lawsuit says that GitHub bears responsibility for the Capital One breach because it actively encourages hacking and stored stolen data.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Attackers Try to Evade Defenses with Smaller DDoS Floods, Probes πŸ•΄

Cybercriminals are initiating more attacks using low-bandwidth techniques, but the tactics expand the gray area between DDoS attacks and popular methods of mass scanning.

πŸ“– Read

via "Dark Reading: ".
❌ 20-Year-Old Bug in Legacy Microsoft Code Plagues All Windows Users ❌

A bug in an obscure legacy Windows protocol can lead to serious real-world privilege-escalation attacks.

πŸ“– Read

via "Threatpost".
❌ Lenovo Warns on ThinkPad Bugs, One Unpatched ❌

The notebook maker is warning users of three separate vulnerabilities.

πŸ“– Read

via "Threatpost".
πŸ” Microsoft Urging Users to Patch New Wormable Vulnerabilities πŸ”

Microsoft is urging users to patch a series of critical, BlueKeep-like vulnerabilities in Windows that could be used to spread malware.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
πŸ•΄ Why Companies Fail to Learn from Peers' Mistakes (and How They Can Change) πŸ•΄

Far too often, there's a new breach in the headlines. Companies need to start learning some obvious lessons.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2015-9310

The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9309

The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9308

The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9307

The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2013-7476

The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface.

πŸ“– Read

via "National Vulnerability Database".
❌ Fingerprints of 1M Exposed in Public Biometrics Database ❌

A publicly accessible database exposed the fingerprints and facial recognition information of millions, thrusting biometrics security into the spotlight once again.

πŸ“– Read

via "Threatpost".
πŸ•΄ Trend Micro Patches Privilege Escalation Bug in its Password Manager πŸ•΄

Organizations should update to latest build as soon as possible, security vendor says.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Stronger Defenses Force Cybercriminals to Rethink Strategy πŸ•΄

Researchers see the rise of new relationships and attack techniques as criminals put companies' resilience to the test.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Financial Phishing Grows in Volume and Sophistication in First Half of 2019 πŸ•΄

Criminals are using the tools intended to protect consumers to attack them through techniques that are becoming more successful with each passing month.

πŸ“– Read

via "Dark Reading: ".
⚠ Facebook got humans to listen in on some Messenger voice chats ⚠

Facebook says it's paused the practice of collecting voice clips and sending them to employees to transcribe and analyze.

πŸ“– Read

via "Naked Security".