πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.9K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΄ How to Build a Rock-Solid Cybersecurity Culture πŸ•΄

In part one of this two-part series, we start with the basics - getting everyone to understand what's at stake - and then look at lessons from the trenches.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Typosquatting Websites Proliferate in Run-up to US Elections πŸ•΄

People who mistype the URL for their political candidate or party's website could end up on an opposing party or candidate's website, Digital Shadow's research shows.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2015-9469 (content-grabber)

The content-grabber plugin 1.0 for WordPress has XSS via obj_field_name or obj_field_id.

πŸ“– Read

via "National Vulnerability Database".
⚠ Adobe fixes 46 critical bugs in patchfest ⚠

Adobe patched a total of 82 vulnerabilities across a range of products on Tuesday, including 46 critical bugs.

πŸ“– Read

via "Naked Security".
⚠ Hackers hack card details from BriansClub carding site ⚠

They stole 26 million credit cards from the massive black market site, and now financial institutions are ensuring the cards can't be abused.

πŸ“– Read

via "Naked Security".
⚠ Robotic hand solves Rubik’s Cube by learning how to learn about it ⚠

The system figured out how to overcome little hurdles, like being nudged by a stuffed giraffe when trying to do important robot work.

πŸ“– Read

via "Naked Security".
⚠ Pen testers find mystery black box connected to ship’s engines ⚠

It had an Ethernet connection to the ship LAN but was also connected to a Windows console on the bridge which was so bright at night the crew had covered it up. The assumption had been that it was meant to be there.

πŸ“– Read

via "Naked Security".
⚠ S2 Ep 13: Weird Android zero day and other tech fails – Naked Security podcast ⚠

Listen to the latest episode now!

πŸ“– Read

via "Naked Security".
πŸ” Palo Alto Networks discovers new cryptojacking worm mining for Monero πŸ”

This is the first time that a cryptojacking attack has been observed on Docker.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Data Privacy Protections for the Most Vulnerable - Children πŸ•΄

The business case for why companies that respect the privacy of individuals, and especially minors, will have a strong competitive advantage.

πŸ“– Read

via "Dark Reading: ".
❌ Cisco Aironet Access Points Plagued By Critical, High-Severity Flaws ❌

Cisco has issued patches for critical and high-severity vulnerabilities in its Aironet access point devices.

πŸ“– Read

via "Threatpost".
❌ Trump Campaign Website Left Open to Email Server Hijack ❌

A misconfigured website development tool exposed hundreds of email servers to takeover, including President Donald Trump’s official campaign website.

πŸ“– Read

via "Threatpost".
πŸ›  Suricata IDPE 5.0.0 πŸ› 

Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and Barnyard2 tools.

πŸ“– Go!

via "Security Tool Files β‰ˆ Packet Storm".
πŸ•΄ Cozy Bear Emerges from Hibernation to Hack EU Ministries πŸ•΄

The cyber-espionage group, linked to Russia and blamed for hacking the Democratic National Committee in 2016, has been using covert communications and other techniques to escape detection for at least two years.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2015-9479 (acf_fronted_display)

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Yahoo Breach Victims May Qualify for $358 Payout πŸ•΄

Pending approval of the settlement, affected account holders may be eligible for a payout or two years of free credit monitoring.

πŸ“– Read

via "Dark Reading: ".
❌ Hacking Back? BriansClub Dark Web Attack a Boon for Banks ❌

The theft of 26 million card records from an underground site offers valuable intel for banks.

πŸ“– Read

via "Threatpost".
πŸ” 70 Percent of Healthcare Breach Data Could Lead to ID Theft πŸ”

New research looks at 10 years of healthcare data breaches and breaks down the specific types of data exposed.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
πŸ” How to find the Firefox Certificate Viewer πŸ”

Mozilla is set to launch a Certificate Viewer. Find out why and how to open it.

πŸ“– Read

via "Security on TechRepublic".