πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ“’ Novel social engineering attacks soar 135% amid uptake of generative AI πŸ“’

82% of employees are worried about hackers using generative AI to create scam emails

πŸ“– Read

via "ITPro".
πŸ”₯1
πŸ“’ Storage's role in addressing the challenges of ensuring cyber resilience πŸ“’

Understanding the role of data storage in cyber resiliency

πŸ“– Read

via "ITPro".
πŸ“’ UK’s offensive hacking force plans to scale operations to meet government's demands πŸ“’

The NCF conducts cyber operations "on a daily basis" to protect UK national security and counter growing cyber threats

πŸ“– Read

via "ITPro".
πŸ‘1
πŸ“’ IDC MarketScape: Worldwide unified endpoint management services πŸ“’

2022 vendor assessment

πŸ“– Read

via "ITPro".
❀1
πŸ“’ The GoAnywhere data breach explained πŸ“’

How a zero-day vulnerability in Fortra’s GoAnywhere MFT product led to an array of high-profile cyber attacks around the world

πŸ“– Read

via "ITPro".
πŸ“’ Using APIs to rewire supply chains in 2023 πŸ“’

Supply chains are on the mend after breaking down recently, and APIs are helping stakeholders get a better handle on data

πŸ“– Read

via "ITPro".
πŸ“’ UK criminal records office suffers two-month "cyber security incident" πŸ“’

ACRO was forced to shut its systems offline and security experts are suggesting ransomware may be involved

πŸ“– Read

via "ITPro".
πŸ“’ Unified Endpoint Management and Security in a work-from-anywhere world πŸ“’

Management and security activities are deeply intertwined, requiring integrated workflows between IT and security teams

πŸ“– Read

via "ITPro".
πŸ“’ An EDR buyer's guide πŸ“’

How to pick the best endpoint detection and response solution for your business

πŸ“– Read

via "ITPro".
πŸ“’ Western Digital suffers cyber attack, shuts down systems πŸ“’

Customers are taking to Twitter to report they’re unable to log into their storage products through Western Digital’s online portal

πŸ“– Read

via "ITPro".
πŸ“’ 2022 Magic quadrant for Security Information and Event Management (SIEM) πŸ“’

SIEM is evolving into a security platform with multiple features and deployment models

πŸ“– Read

via "ITPro".
πŸ“’ Nearly half of security practitioners told to β€˜keep data breaches under wraps’ πŸ“’

Security professionals are increasingly worried about legal action due to a mismanaged data breach response

πŸ“– Read

via "ITPro".
β€Ό CVE-2023-27730 β€Ό

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_lvlhsh_find at src/njs_lvlhsh.c.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-27727 β€Ό

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_function_frame at src/njs_function.h.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-27728 β€Ό

Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_dump_is_recursive at src/njs_vmcode.c.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-27719 β€Ό

D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-27720 β€Ό

D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-27718 β€Ό

D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-27729 β€Ό

Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-29215 β€Ό

In Apache Linkis <=1.3.1, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql JDBC parameters in JDBC EengineConn Module will trigger a deserialization vulnerability and eventually lead to remote code execution. Therefore, the parameters in the Mysql JDBC URL should be blacklisted. Versions of Apache Linkis <= 1.3.0 will be affected. We recommend users upgrade the version of Linkis to version 1.3.2.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-27602 β€Ό

In Apache Linkis <=1.3.1, The PublicService module uploadsΓ‚ files without restrictions on the path to the uploadedΓ‚ files, and file types. We recommend users upgrade the version of Linkis to version 1.3.2.Γ‚  For versions <=1.3.1, we suggest turning on the file path check switch in linkis.properties `wds.linkis.workspace.filesystem.owner.check=true` `wds.linkis.workspace.filesystem.path.check=true`

πŸ“– Read

via "National Vulnerability Database".