πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΄ Suspicious New Ransomware Group Claims Sony Hack πŸ•΄

A deceitful threat actor claims its biggest haul yet. But what, if any, Sony data does it actually have?

πŸ“– Read

via "Dark Reading".
πŸ•΄ Researchers Uncover RaaS Affiliate Distributing Multiple Ransomware Strains πŸ•΄

Ransomware-as-a-service affiliate ShadowSyndicate is unusual for the size of its malicious infrastructure and the fact that it's distributing seven different ransomware strains.

πŸ“– Read

via "Dark Reading".
🦿 Upgrade Your Cybersecurity With This VPN That’s Only $89 for Three Years 🦿

Windscribe VPN gives you tools to block ads, create a safe hotspot, spoof your location, and more for the 3 years for the best price online.

πŸ“– Read

via "Tech Republic".
β™ŸοΈ β€˜Snatch’ Ransom Group Exposes Visitor IP Addresses β™ŸοΈ

The victim shaming site operated by the Snatch ransomware group is leaking data about its true online location and internal operations, as well as the Internet addresses of its visitors, KrebsOnSecurity has found. The leaked data suggest that Snatch is one of several ransomware groups using paid ads on Google.com to trick people into installing malware disguised as popular free software, such as Microsoft Teams, Adobe Reader, Mozilla Thunderbird, and Discord.

πŸ“– Read

via "Krebs on Security".
πŸ“’ Hackers are spoofing themselves as GitHub's Dependabot to steal user passwords πŸ“’

GitHub Dependabot was crudely spoofed in hundreds of successful attacks on open source projects

πŸ“– Read

via "ITPro".
πŸ•΄ Will Government Secure Open Source or Muck It Up? πŸ•΄

The US government aims to support open source projects, while the European Union seeks to make open source projects liable for their software. Which approach will lead to more security?

πŸ“– Read

via "Dark Reading".
🦿 Atlas VPN Review (2023): Features, Pricing, Alternatives 🦿

Atlas VPN is a budget-friendly VPN that offers a unique IP address swapping feature perfect for privacy enthusiasts.

πŸ“– Read

via "Tech Republic".
β€Ό CVE-2023-40391 β€Ό

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonoma 14, Xcode 15. An app may be able to disclose kernel memory.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-44023 β€Ό

Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.

πŸ“– Read

via "National Vulnerability Database".
❀1
β€Ό CVE-2023-41241 β€Ό

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin <=Γ‚ 2.5.0 versions.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-41238 β€Ό

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UltimatelySocial Social Media Share Buttons & Social Sharing Icons plugin <=Γ‚ 2.8.3 versions.

πŸ“– Read

via "National Vulnerability Database".
πŸ‘1
β€Ό CVE-2023-40431 β€Ό

The issue was addressed with improved memory handling. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-35990 β€Ό

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14. An app may be able to identify what other apps a user has installed.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40434 β€Ό

A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access a user's Photos Library.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40443 β€Ό

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to gain root privileges.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-41174 β€Ό

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to execute arbitrary code with kernel privileges.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40048 β€Ό

In WS_FTP ServerΓ‚ version 8.8.0 prior to 8.8.2, the WS_FTP Server Manager interface was missing cross-site request forgery (CSRF) protection on a POST transaction corresponding to a WS_FTP Server administrative function.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40330 β€Ό

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Milan Petrovic GD Security Headers plugin <=Γ‚ 1.6.1 versions.

πŸ“– Read

via "National Vulnerability Database".