π Android Security Bulletin August 2019: What you need to know π
π Read
via "Security on TechRepublic".
Another month is here, and Android finds itself with a mixture of critical and high vulnerabilities.π Read
via "Security on TechRepublic".
TechRepublic
Android Security Bulletin August 2019: Critical vulnerabilities in Broadcom and Qualcomm components
Another month is here, and Android finds itself with a mixture of critical and high vulnerabilities.
π΄ Endgame Boosts Apple Security to Be Commensurate with Windows Security π΄
π Read
via "Dark Reading: ".
Gone are the days when users could take refuge from Windows threats with Apple devices, as malware writers are exploiting OSX and iOS with real vigor, says Mark Dufresne, VP of R&D at Endgame. And though it's taken a while, Mac security has achieved parity with Windows so that Apple users need no longer settle for "protected enough."π Read
via "Dark Reading: ".
Dark Reading
Endgame Boosts Apple Security to Be Commensurate with Windows Security - Dark Reading
Gone are the days when users could take refuge from Windows threats with Apple devices, as malware writers are exploiting OSX and iOS with real vigor, says Mark Dufresne, VP of R&D at Endgame. And though it's taken a while, Mac security has achieved parityβ¦
π How Organizations Can Stay Ahead of Changing Privacy Laws π
π Read
via "Subscriber Blog RSS Feed ".
GDPR, CCPA, PIPEDA. Privacy legislation is constantly changing these days. We asked 26 business leaders, security pros, and attorneys how to best stay ahead of changing privacy laws.π Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
How Organizations Can Stay Ahead of Changing Privacy Laws
GDPR, CCPA, PIPEDA. Privacy legislation is constantly changing these days. We asked 26 business leaders, security pros, and attorneys how to best stay ahead of changing privacy laws.
π΄ Threat Intelligence Gateways: A Useful Adjunct to Overworked Perimeter Security π΄
π Read
via "Dark Reading: ".
Comparative research shows the relative strengths and weaknesses of five TIG vendors and which kinds of security organization will reap the most benefit.π Read
via "Dark Reading: ".
Darkreading
Threat Intelligence Gateways: A Useful Adjunct to Overworked Perimeter Security
Comparative research shows the relative strengths and weaknesses of five TIG vendors and which kinds of security organization will reap the most benefit.
π΄ Make DNS a Cornerstone of Your Cyber Security Arsenal π΄
π Read
via "Dark Reading: ".
Better known for their essential role in networking, Domain Name Servers should be tapped as a means to identify - and shut down - suspicious or destructive activity, according to Anthony James, VP of Marketing for Infoblox. He also explains how to combine DNS with DHCP and IP address management to improve an organization's security.π Read
via "Dark Reading: ".
Dark Reading
Make DNS a Cornerstone of Your Cyber Security Arsenal - Dark Reading
Better known for their essential role in networking, Domain Name Servers should be tapped as a means to identify - and shut down - suspicious or destructive activity, according to Anthony James, VP of Marketing for Infoblox. He also explains how to combineβ¦
β Google Launches Open-Source Browser Extension for Ad Transparency β
π Read
via "Threatpost".
Google introduced a new initiative that it hopes will fight shady online advertising practices such as digital fingerprinting.π Read
via "Threatpost".
Threat Post
Google Launches Open-Source Browser Extension for Ad Transparency
Google introduced a new initiative that it hopes will fight shady online advertising practices such as digital fingerprinting.
β Humans may have been listening to you via your Xbox β
π Read
via "Naked Security".
Microsoft has given audio clips to contractors for years, but it says it recently stopped. ... For the most part.π Read
via "Naked Security".
Sophos News
Naked Security β Sophos News
ATENTIONβΌ New - CVE-2014-10394
π Read
via "National Vulnerability Database".
The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2014-10392
π Read
via "National Vulnerability Database".
The cforms2 plugin before 10.2 for WordPress has XSS.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2014-10391
π Read
via "National Vulnerability Database".
The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2014-10390
π Read
via "National Vulnerability Database".
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2014-10389
π Read
via "National Vulnerability Database".
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2014-10388
π Read
via "National Vulnerability Database".
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2014-10387
π Read
via "National Vulnerability Database".
The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection.π Read
via "National Vulnerability Database".
π΄ Microsoft Tops Phishers' Favorite Brands as Facebook Spikes π΄
π Read
via "Dark Reading: ".
Microsoft remains the favorite brand to spoof in phishing campaigns, but more attackers are impersonating Facebook.π Read
via "Dark Reading: ".
Darkreading
Microsoft Tops Phishers' Favorite Brands as Facebook Spikes
Microsoft remains the favorite brand to spoof in phishing campaigns, but more attackers are impersonating Facebook.
π΄ Time to Get Smarter About Threat Intel π΄
π Read
via "Dark Reading: ".
Bad actors move faster than threat intelligence feeds and the infosec pros who monitor them, notes Joakim Kennedy, Threat Intel Manager for Anomali Research. Organizations need to establish a dedicated team to manage threat intel, and an adequate budget. Kennedy also encourages intelligence sharing as part of a stepped-up protection strategy.π Read
via "Dark Reading: ".
Dark Reading
Time to Get Smarter About Threat Intel - Dark Reading
Bad actors move faster than threat intelligence feeds and the infosec pros who monitor them, notes Joakim Kennedy, Threat Intel Manager for Anomali Research. Organizations need to establish a dedicated team to manage threat intel, and an adequate budget.β¦
π΄ Aviation Faces Increasing Cybersecurity Scrutiny π΄
π Read
via "Dark Reading: ".
Some aviation experts and security researchers are trying to foster closer alliances for securing airplane networks.π Read
via "Dark Reading: ".
Darkreading
Aviation Faces Increasing Cybersecurity Scrutiny
Some aviation experts and security researchers are trying to foster closer alliances for securing airplane networks.
β Quick thinking by Portland Public Schools stops $2.9m BEC scam β
π Read
via "Naked Security".
Employees at Portland Public Schools were breathing easier this week after thwarting a business email compromise (BEC) scam that could have cost them almost $3m.π Read
via "Naked Security".
Naked Security
Quick thinking by Portland Public Schools stops $2.9m BEC scam
Employees at Portland Public Schools were breathing easier this week after thwarting a business email compromise (BEC) scam that could have cost them almost $3m.
ATENTIONβΌ New - CVE-2014-10386
π Read
via "National Vulnerability Database".
The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2014-10382
π Read
via "National Vulnerability Database".
The feature-comments plugin before 1.2.5 for WordPress has CSRF for featuring or burying a comment.π Read
via "National Vulnerability Database".
ATENTIONβΌ New - CVE-2013-7483
π Read
via "National Vulnerability Database".
The slidedeck2 plugin before 2.3.5 for WordPress has file inclusion.π Read
via "National Vulnerability Database".