🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕴 Controlling Data Leakage in Cloud Test-Dev Environments 🕴

The focus on digital transformation and compressing development release cycles is appealing, but that means security can be left behind. How should security practitioners address this challenge?

📖 Read

via "Dark Reading: ".
🔐 MasterMana Botnet targets business users with sophisticated phishing attacks 🔐

A new botnet known as MasterMana shows a high level of sophistication with a low cost to execute, according a report from cybersecurity firm Prevailion.

📖 Read

via "Security on TechRepublic".
Google Adds Password Checkup Feature to Chrome Browser

Google's new password checkup tool joins other similar services including Have I Been Pwned and Mozilla's Firefox Monitor.

📖 Read

via "Threatpost".
🔐 Yahoo porn hacking breach shows need for better security: 5 ways to protect your company 🔐

This week, a former Yahoo employee pleaded guilty to hacking into the email accounts of more than 6,000 users, looking for porn. Companies need to protect themselves from similar security breaches. Here's what to do.

📖 Read

via "Security on TechRepublic".
🔐 How to quickly deploy a honeypot with Kali Linux 🔐

Lure possible attackers into a trap with a Kali Linux honeypot.

📖 Read

via "Security on TechRepublic".
🔐 How to quickly deploy a honeypot with Kali Linux 🔐

Lure possible attackers into a trap with a Kali Linux honeypot.

📖 Read

via "Security on TechRepublic".
🕴 How Private Are You? 🕴

Think twice before posting about ... grits.

📖 Read

via "Dark Reading: ".
🕴 MasterMana Botnet Shows Trouble Comes at Low Cost 🕴

For less than $200, attackers were able to infect thousands of systems, stealing user credentials, cryptocurrency wallets, and web histories, an analysis finds.

📖 Read

via "Dark Reading: ".
Virus Bulletin 2019: Japanese Attacks Highlight Savvy APT Strategy

Multiyear campaigns stretching back to at least 2014 have been seen using zero-days in region-specific software.

📖 Read

via "Threatpost".
🕴 Google's 'Password Checkup' Tool Tells You When Passwords Are Leaked 🕴

The feature will check the strength of saved passwords and alert users when they're compromised in a breach.

📖 Read

via "Dark Reading: ".
Virus Bulletin 2019: Geost Android Botnet Goes After Millions of Euros

Bad OpSec led to the botnet's discovery -- revealing 800,000 victims in Russia.

📖 Read

via "Threatpost".
🕴 Quantum-Safe Cryptography: The Time to Prepare Is Now 🕴

Quantum computing is real and it's evolving fast. Is the security industry up to the challenge?

📖 Read

via "Dark Reading: ".
🔏 Employee Accessed, Abused Customer Data at American Express 🔏

An employee - since terminated - at the financial services corporation is being investigated for fraud after accessing and stealing cardholder data.

📖 Read

via "Subscriber Blog RSS Feed ".
Why This New Cybergang is Heralding a New Age For BEC

Cybergang Silent Starling is taking BEC to the next level by targeting suppliers and going after their customers.

📖 Read

via "Threatpost".
🕴 New Silent Starling Attack Group Puts Spin on BEC 🕴

The West African cybergang has successfully infiltrated more than 500 companies using a tactic dubbed 'vendor email compromise.'

📖 Read

via "Dark Reading: ".
🕴 Millions More Embedded Devices Contain Vulnerable IPnet Software 🕴

FDA, DHS issue fresh warnings on easily exploitable URGENT/11 flaws in medical, SCADA systems, industrial controllers, and other devices.

📖 Read

via "Dark Reading: ".
🛠 PDFGrab 0.4.4 🛠

pdfgrab is a python script that analyzes pdf files to extract their metadata. You can direct it to analyze a single file, a directory of pdfs, provide it a url, or have it leverage googlesearch to get pdfs at a target site.

📖 Go!

via "Security Tool Files ≈ Packet Storm".
🛠 Clam AntiVirus Toolkit 0.102.0 🛠

Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use in your own software.

📖 Go!

via "Security Tool Files ≈ Packet Storm".
ATENTION New - CVE-2019-10212

A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.

📖 Read

via "National Vulnerability Database".
Zendesk Exposes 10,000 Accounts to Unknown Third Party

Zendesk says access occurred in 2016 and that only a small percentage of customers were impacted.

📖 Read

via "Threatpost".
🕴 Stalkware on the Rise Globally 🕴

Stalkware is being installed on more and more victims' devices, and the trend is only accelerating, according to a new report.

📖 Read

via "Dark Reading: ".