🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🦿 How to Retrieve and Generate Google 2FA Backup Codes 🦿

Learn how to retrieve your Google 2FA backup codes and how best to use them.

📖 Read

via "Tech Republic".
‼ CVE-2023-38902 ‼

An issue in RG-EW series home routers and repeaters v.EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P218, RG-EG series business VPN routers v.EG_3.0(1)B11P216, EAP and RAP series wireless access points v.AP_3.0(1)B11P218, and NBC series wireless controllers v.AC_3.0(1)B11P86 allows a remote attacker to execute arbitrary code via the unifyframe-sgi.elf component in sub_40DA38.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-38838 ‼

SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via the edit.php component.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-4394 ‼

A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information

📖 Read

via "National Vulnerability Database".
🦿 7 Ways to Access Safe Mode in Windows 10 (2023 Update) 🦿

Learn seven different ways to boot a Windows 10 PC in Safe Mode to help troubleshoot issues using this comprehensive guide.

📖 Read

via "Tech Republic".
🔥1
🕴 'Play' Ransomware Group Targeting MSPs Worldwide in New Campaign 🕴

Attackers use remote monitoring and management tools at MSPs to gain unfettered access to target networks.

📖 Read

via "Dark Reading".
âš  S3 Ep148: Remembering crypto heroes âš 

Celebrating the true crypto bros. Listen now (full transcript available).

📖 Read

via "Naked Security".
‼ CVE-2023-31079 ‼

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Chris Roberts Tippy plugin <= 6.2.1 versions.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-28693 ‼

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Balasaheb Bhise Advanced Youtube Channel Pagination plugin <= 1.0 version.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-34412 ‼

A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows anauthenticated remote attacker to store an arbitrary JavaScript payload on the diagnosis page of the device.That page is loaded immediately after login in to the device and runs the stored payload, allowing theattacker to read and write browser data and reduce system performance.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-40272 ‼

Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving an opportunity to read files on the Airflow server.It is recommended to upgrade to a version that is not affected.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-31072 ‼

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Praveen Goswami Advanced Category Template plugin <= 0.1 versions.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-28783 ‼

Auth. (shop manager+) Stored Cross-Site Scripting (XSS) vulnerability in PHPRADAR Woocommerce Tip/Donation plugin <= 1.2 versions.

📖 Read

via "National Vulnerability Database".
🦿 31% of Organizations Using Generative AI Ask It To Write Code 🦿

Code development, content creation and analytics are the top generative AI use cases. However, many enterprise users don't trust gen AI to be private.

📖 Read

via "Tech Republic".
🕴 An Overview of Dubai's First and Second Cybersecurity Strategy 🕴

Security demands a strong fortress in cyberspace, and Dubai has rolled out two cybersecurity strategies to protect the data of the government and citizens.

📖 Read

via "Dark Reading".
🕴 LinkedIn Suffers 'Significant' Wave of Account Hacks 🕴

Users report losing access to their accounts, with some being pressured into paying a ransom to get back in or else face permanent account deletion.

📖 Read

via "Dark Reading".
🕴 Researchers Trick an iPhone Into Faking Airplane Mode 🕴

How mobile attackers could gaslight iPhone users, allowing the perfect cover for post-exploitation malicious activity.

📖 Read

via "Dark Reading".
‼ CVE-2023-3078 ‼

An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-2914 ‼

The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the affected products. When the ThinManager processes incoming messages, a read access violation occurs and terminates the process. A malicious user could exploit this vulnerability by sending a crafted synchronization protocol message and causing a denial of service condition in the software.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-34419 ‼

A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-2915 ‼

The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager software processes a certain function. If exploited, an unauthenticated remote threat actor can delete arbitrary files with system privileges. A malicious user could exploit this vulnerability by sending a specifically crafted synchronization protocol message resulting in a denial-of-service condition.

📖 Read

via "National Vulnerability Database".