❌ vBulletin Flaw Exploited in Dutch Sex-Work Forum Breach ❌
📖 Read
via "Threatpost".
A hacker is selling the email addresses of 250,000 users of a Dutch sex-work forum -- data that researchers say could be used for blackmail.📖 Read
via "Threatpost".
Threat Post
vBulletin Flaw Exploited in Dutch Sex-Work Forum Breach
A hacker is selling the email addresses of 250,000 users of a Dutch sex-work forum — data that researchers say could be used for blackmail.
🕴 Imperva Details Response to Customer Database Exposure 🕴
📖 Read
via "Dark Reading: ".
The cloud security's CEO and CTO lay out the timeline of events and the steps customers should take to protect their accounts.📖 Read
via "Dark Reading: ".
Darkreading
Imperva Details Response to Customer Database Exposure
The cloud security's CEO and CTO lay out the timeline of events and the steps customers should take to protect their accounts.
🕴 iTunes Zero-Day Exploited to Deliver BitPaymer 🕴
📖 Read
via "Dark Reading: ".
The ransomware operators targeted an "unquoted path" vulnerability in iTunes for Windows to evade detection and install BitPaymer.📖 Read
via "Dark Reading: ".
Darkreading
iTunes Zero-Day Exploited to Deliver BitPaymer
The ransomware operators targeted an "unquoted path" vulnerability in iTunes for Windows to evade detection and install BitPaymer.
⚠ Apple removes app that tracks Hong Kong police and protestors ⚠
📖 Read
via "Naked Security".
Apple was under fire this week after banning an app that tracked the location of both police and protesters in Hong Kong on a live map.📖 Read
via "Naked Security".
Naked Security
Apple removes app that tracks Hong Kong police and protestors
Apple was under fire this week after banning an app that tracked the location of both police and protesters in Hong Kong on a live map.
⚠ Facebook flags thousands of kids as interested in gambling, booze ⚠
📖 Read
via "Naked Security".
According to a new report, its algorithmic labelling may expose minors to age-inappropriate, targeted advertising.📖 Read
via "Naked Security".
Naked Security
Facebook flags thousands of kids as interested in gambling, booze
According to a new report, its algorithmic labelling may expose minors to age-inappropriate, targeted advertising.
⚠ Hackers bypassing some types of 2FA security FBI warns ⚠
📖 Read
via "Naked Security".
Some types of 2FA security can no longer be guaranteed to keep the bad guys out, the FBI warned US companies.📖 Read
via "Naked Security".
Naked Security
Hackers bypassing some types of 2FA security FBI warns
Some types of 2FA security can no longer be guaranteed to keep the bad guys out, the FBI warned US companies.
⚠ Most Americans don’t have a clue what https:// means ⚠
📖 Read
via "Naked Security".
...and wouldn't know 2FA from a hole in the ground, according to Pew Research.📖 Read
via "Naked Security".
Naked Security
Most Americans don’t have a clue what https:// means
…and wouldn’t know 2FA from a hole in the ground, according to Pew Research.
ATENTION‼ New - CVE-2010-5340
📖 Read
via "National Vulnerability Database".
IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent in 10.2.0.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2010-5339
📖 Read
via "National Vulnerability Database".
IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] is non-persistent in 10.1.3 and 10.2.0.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2010-5338
📖 Read
via "National Vulnerability Database".
IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action] is non-persistent in 10.1.3 and 10.2.0.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2010-5337
📖 Read
via "National Vulnerability Database".
IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][controller] is non-persistent in 10.1.3 and 10.2.0.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2010-5336
📖 Read
via "National Vulnerability Database".
IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persistent in 10.2.0.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2010-5335
📖 Read
via "National Vulnerability Database".
IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (script to basic/minimizer/index.php) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2010-5334
📖 Read
via "National Vulnerability Database".
IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (_c to basic/index.html) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files.📖 Read
via "National Vulnerability Database".
❌ Iran-Linked ‘Charming Kitten’ Touts New Spearphishing Tactics ❌
📖 Read
via "Threatpost".
A campaign first observed last year has ramped up its attack methods and appears to be linked to activity targeting President Trump’s 2020 re-election campaign.📖 Read
via "Threatpost".
Threat Post
Iran-Linked ‘Charming Kitten’ Touts New Spearphishing Tactics
A campaign first observed last year has ramped up its attack methods and appears to be linked to activity targeting President Trump’s 2020 re-election campaign.
🕴 Close the Gap Between Cyber-Risk and Business Risk 🕴
📖 Read
via "Dark Reading: ".
Four steps outlining how security teams can better understand their company's cyber-risk and demonstrate to company leadership what's being done to mitigate the resulting business risk.📖 Read
via "Dark Reading: ".
Darkreading
Close the Gap Between Cyber-Risk and Business Risk
Four steps outlining how security teams can better understand their company's cyber-risk and demonstrate to company leadership what's being done to mitigate the resulting business risk.
⚠ S2 Ep12: Dark Web, O.MG Cable spying and securing new laptops – Naked Security Podcast ⚠
📖 Read
via "Naked Security".
Listen to the latest episode now!📖 Read
via "Naked Security".
Naked Security
S2 Ep12: Dark Web, O.MG Cable spying and securing new laptops – Naked Security Podcast
Listen to the latest episode now!
🕴 Build Your Cybersecurity Toolkit at Black Hat Europe in December 🕴
📖 Read
via "Dark Reading: ".
Now's the time to start planning what to see and do at Black Hat Europe, which is jam-packed with relevant Briefings and Arsenal demos.📖 Read
via "Dark Reading: ".
Dark Reading
Build Your Cybersecurity Toolkit at Black Hat Europe in December
Now's the time to start planning what to see and do at Black Hat Europe, which is jam-packed with relevant Briefings and Arsenal demos.
🔐 How to enable SSH session recording in CentOS 8 🔐
📖 Read
via "Security on TechRepublic".
Learn how to enable SSH session recording in CentOS 8.📖 Read
via "Security on TechRepublic".
TechRepublic
How to enable SSH session recording in CentOS 8
Learn how to enable SSH session recording in CentOS 8.