πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
ATENTIONβ€Ό New - CVE-2015-9419

The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9418

The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9417

The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9416

The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9415

The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9414

The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9413

The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title parameter.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9412

The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9411

The Postmatic plugin before 1.4.6 for WordPress has XSS.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9411

The Postmatic plugin before 1.4.6 for WordPress has XSS.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9410

The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter.

πŸ“– Read

via "National Vulnerability Database".
⚠ Vimeo sued for storing faceprints of people without their say-so ⚠

The suit was filed under BIPA, the Illinois law that requires written consent to grab people's faceprints - the same law Facebook's battling.

πŸ“– Read

via "Naked Security".
⚠ Update ColdFusion now! Emergency patch for critical flaws ⚠

Adobe has rushed out fixes for three vulnerabilities in its ColdFusion web development platform, two of which have been given the top billing of β€˜critical’.

πŸ“– Read

via "Naked Security".
⚠ Russian pleads guilty in massive JPMorgan hacking scheme ⚠

Andrei Tyurin is the first to be convicted in one of the largest thefts of customer data from a single US financial institution in history.

πŸ“– Read

via "Naked Security".
⚠ Hackers are infecting WordPress sites via a defunct plug-in ⚠

If you're a Wordpress admin using a plug-in called Rich Reviews, you'll want to uninstall it. Now. The now-defunct plug-in has a major vulnerability that allows malvertisers to infect sites running Wordpress and redirect visitors to other sites.

πŸ“– Read

via "Naked Security".
❌ Chrome Bug, Not Avid Software, Causes Damage to MacOS File Systems ❌

Users scrambled to find a fix for the problem and eventually Google took responsibility for the issue.

πŸ“– Read

via "Threatpost".
❌ Cyber-Risk Business Cases: Using Economic Impact to Justify TIG Investment ❌

How to determine -- and communicate -- the value of Threat Intelligence Gateways (TIGs) in your enterprise.

πŸ“– Read

via "Threatpost".
πŸ” Why businesses would rather lose revenue than data πŸ”

While businesses don't want to lose data, 66% of business decision makers said their current IT resources do not keep up with growing technological demands.

πŸ“– Read

via "Security on TechRepublic".
⚠ S2 Ep10: Emotet’s back, mutant WannaCry and Insta scam – Naked Security Podcast ⚠

Here's the latest Naked Security podcast - listen now!

πŸ“– Read

via "Naked Security".
❌ CISOs: Support Vendor Security Ops for Best Cloud Results ❌

Despite CISOs' apprehension about increasing dependence on SaaS applications and the security risks the cloud represents, adoption isn’t slowing down.

πŸ“– Read

via "Threatpost".
πŸ” 75% of execs cite phishing as the most significant security threat to businesses πŸ”

Training is the key to helping the enterprise avoid cyber threats from phishing or other means.

πŸ“– Read

via "Security on TechRepublic".