🔏 Friday Five: 9/6 Edition 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
iPhone hacking levels up, military veterans targeted in an identity fraud scam, and more - catch up on the week's biggest stories with the Friday Five!📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five: 9/6 Edition
iPhone hacking levels up, military veterans targeted in an identity fraud scam, and more - catch up on the week's biggest stories with the Friday Five!
❌ News Wrap: Deepfake CEO Voice Scam, Facebook Phone Data Exposed ❌
📖 Read
via "Threatpost".
From deepfake to data exposures, the Threatpost team talks about the top security trends driving this week's biggest news stories.📖 Read
via "Threatpost".
Threat Post
News Wrap: Deepfake CEO Voice Scam, Facebook Phone Data Exposed
From deepfake to data exposures, the Threatpost team talks about the top security trends driving this week's biggest news stories.
🕴 Mail System Vulnerability Delivers Root Privileges 🕴
📖 Read
via "Dark Reading: ".
The vulnerability in Exim could allow an attacker to remotely execute code with root privileges.📖 Read
via "Dark Reading: ".
Darkreading
Mail System Vulnerability Delivers Root Privileges
The vulnerability in Exim could allow an attacker to remotely execute code with root privileges.
❌ Back-to-School Scams Target Students with Library-Themed Emails ❌
📖 Read
via "Threatpost".
Students should keep their eyes peeled for phishing emails purporting to be from their colleges, as well as online student resources laced with malware, researchers warn.📖 Read
via "Threatpost".
Threat Post
Back-to-School Scams Target Students with Library-Themed Emails
Students should keep their eyes peeled for phishing emails purporting to be from their colleges, as well as online resources laced with malware, researchers warn.
❌ China’s APT3 Pilfers Cyberweapons from the NSA ❌
📖 Read
via "Threatpost".
Large portions of APT3's remote code-execution package were likely reverse-engineered from prior attack artifacts.📖 Read
via "Threatpost".
Threat Post
China’s APT3 Pilfers Cyberweapons from the NSA
Large portions of APT3's remote code-execution package were likely reverse-engineered from prior attack artifacts.
❌ ThreatList: Police Use of Facial Recognition is Just Fine, Say Most Americans ❌
📖 Read
via "Threatpost".
A survey by Pew Research Center finds that Americans support use of facial recognition by law enforcement , but not by tech or advertising companies.📖 Read
via "Threatpost".
Threat Post
ThreatList: Police Use of Facial Recognition is Just Fine, Say Most Americans
A survey by Pew Research Center finds that Americans support use of facial recognition by law enforcement , but not by tech or advertising companies.
ATENTION‼ New - CVE-2016-7398
📖 Read
via "National Vulnerability Database".
A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and earlier allows attackers to crash PHP and possibly execute arbitrary code via crafted HTTP requests.📖 Read
via "National Vulnerability Database".
🕴 Chinese Group Built Advanced Trojan by Reverse Engineering NSA Attack Tool 🕴
📖 Read
via "Dark Reading: ".
📖 Read
via "Dark Reading: ".
Darkreading
Chinese Group Built Advanced Trojan by Reverse Engineering NSA Attack Tool
APT3 quietly monitored an NSA attack on its systems and used the information to build a weapon of its own.
ATENTION‼ New - CVE-2018-11198
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10937
📖 Read
via "National Vulnerability Database".
IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.📖 Read
via "National Vulnerability Database".
⚠ Patch early, patch often – and patch everything! ⚠
📖 Read
via "Naked Security".
Here's our latest Naked Security Live video - all about WordPress, plugins and patching.📖 Read
via "Naked Security".
Naked Security
Patch early, patch often – and patch everything!
Here’s our latest Naked Security Live video – all about WordPress, plugins and patching.
⚠ Monday review – the hot 21 stories of the week ⚠
📖 Read
via "Naked Security".
From backdooring WordPress sites to Raspberry Pi in space, and everything in between. It's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 21 stories of the week
From backdooring WordPress sites to Raspberry Pi in space, and everything in between. It’s weekly roundup time.
⚠ US city balks at paying $5.3 million ransomware demand ⚠
📖 Read
via "Naked Security".
The attack quickly encrypted 158 workstations - and would have been worse had it struck later in the working day.📖 Read
via "Naked Security".
Naked Security
US city balks at paying $5.3 million ransomware demand
The attack quickly encrypted 158 workstations – and would have been worse had it struck later in the working day.
⚠ Facebook launches $10m deepfake detection project ⚠
📖 Read
via "Naked Security".
If you're worried about the evil potential of deepfake video, you're not alone; so is Facebook.📖 Read
via "Naked Security".
Naked Security
Facebook launches $10m deepfake detection project
If you’re worried about the evil potential of deepfake video, you’re not alone; so is Facebook.
⚠ Brave accuses Google of sidestepping GDPR ⚠
📖 Read
via "Naked Security".
A senior executive at private browser company Brave has accused Google of using a workaround that lets it identify users to ad networks.📖 Read
via "Naked Security".
Naked Security
Brave accuses Google of sidestepping GDPR
A senior executive at private browser company Brave has accused Google of using a workaround that lets it identify users to ad networks.
⚠ WordPress 5.2.3 fixes new clutch of security vulnerabilities ⚠
📖 Read
via "Naked Security".
WordPress version 5.2.3 has just appeared on the download pipe featuring half a dozen security fixes and software enhancements.📖 Read
via "Naked Security".
Naked Security
WordPress 5.2.3 fixes new clutch of security vulnerabilities
WordPress version 5.2.3 has just appeared on the download pipe featuring half a dozen security fixes and software enhancements.
❌ Apple Claims Google is Spreading FUD Over Patched iPhone Bugs ❌
📖 Read
via "Threatpost".
Apple said Google’s recent analysis of vulnerabilities found January in iOS painted a misleading picture of the scope of the attacks and the risk involved📖 Read
via "Threatpost".
Threat Post
Apple Claims Google is Spreading FUD Over Patched iPhone Bugs
Apple said Google’s recent analysis of vulnerabilities found January in iOS painted a misleading picture of the scope of the attacks and the risk involved
🕴 Phishers' Latest Tricks for Reeling in New Victims 🕴
📖 Read
via "Dark Reading: ".
Phishing works because people are, by nature, trusting -- but these evolving phishing techniques make it even tougher for security managers to stay on top.📖 Read
via "Dark Reading: ".
Dark Reading
Phishers' Latest Tricks for Reeling in New Victims
Phishing works because people are, by nature, trusting -- but these evolving phishing techniques make it even tougher for security managers to stay on top.
🔐 Google hopes to protect users with open source differential privacy library 🔐
📖 Read
via "Security on TechRepublic".
Google's differential privacy library will give organizations a way to study their data while protecting people's information.📖 Read
via "Security on TechRepublic".
TechRepublic
Google hopes to protect users with open source differential privacy library
Google's differential privacy library will give organizations a way to study their data while protecting people's information.
❌ Critical Exim Flaw Opens Millions of Servers to Takeover ❌
📖 Read
via "Threatpost".
A critical vulnerability found in Exim servers could enable a remote, unauthenticated attacker to execute arbitrary code with root privileges.📖 Read
via "Threatpost".
Threat Post
Critical Exim Flaw Opens Millions of Servers to Takeover
A critical vulnerability found in Exim servers could enable a remote, unauthenticated attacker to execute arbitrary code with root privileges.