πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
ATENTIONβ€Ό New - CVE-2015-9465

The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9464

The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9463

The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9462

The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat_id parameter.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9461

The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9460

The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9459

The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options-general.php count parameter.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9459

The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options-general.php count parameter.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9458

The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pk_stt2_db_get_popular_terms count parameter exploitable via CSRF.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2015-9457

The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Works of Art: Cybersecurity Inspires 6 Winning Ideas πŸ•΄

The Center for Long Term Cybersecurity recently awarded grants to six artists in a contest to come up with ideas for works with security themes and elements. Check 'em out.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Akamai Snaps Up ChameleonX to Tackle Magecart πŸ•΄

The Israel-based ChameleonX aims to protect websites from cyberattacks targeting payment data.

πŸ“– Read

via "Dark Reading: ".
❌ Cryptomining Crook Steals Game Developer’s Identity to Carry Out Dirty Work ❌

An alleged fraudster built a vast web of AWS cloud accounts, becoming the platform's biggest consumer of data resources.

πŸ“– Read

via "Threatpost".
❌ vBulletin Flaw Exploited in Dutch Sex-Work Forum Breach ❌

A hacker is selling the email addresses of 250,000 users of a Dutch sex-work forum -- data that researchers say could be used for blackmail.

πŸ“– Read

via "Threatpost".
πŸ•΄ Imperva Details Response to Customer Database Exposure πŸ•΄

The cloud security's CEO and CTO lay out the timeline of events and the steps customers should take to protect their accounts.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ iTunes Zero-Day Exploited to Deliver BitPaymer πŸ•΄

The ransomware operators targeted an "unquoted path" vulnerability in iTunes for Windows to evade detection and install BitPaymer.

πŸ“– Read

via "Dark Reading: ".
⚠ Apple removes app that tracks Hong Kong police and protestors ⚠

Apple was under fire this week after banning an app that tracked the location of both police and protesters in Hong Kong on a live map.

πŸ“– Read

via "Naked Security".
⚠ Facebook flags thousands of kids as interested in gambling, booze ⚠

According to a new report, its algorithmic labelling may expose minors to age-inappropriate, targeted advertising.

πŸ“– Read

via "Naked Security".
⚠ Hackers bypassing some types of 2FA security FBI warns ⚠

Some types of 2FA security can no longer be guaranteed to keep the bad guys out, the FBI warned US companies.

πŸ“– Read

via "Naked Security".
⚠ Most Americans don’t have a clue what https:// means ⚠

...and wouldn't know 2FA from a hole in the ground, according to Pew Research.

πŸ“– Read

via "Naked Security".