⚠ S2 Ep 13: Weird Android zero day and other tech fails – Naked Security podcast ⚠
📖 Read
via "Naked Security".
Listen to the latest episode now!📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🔐 Palo Alto Networks discovers new cryptojacking worm mining for Monero 🔐
📖 Read
via "Security on TechRepublic".
This is the first time that a cryptojacking attack has been observed on Docker.📖 Read
via "Security on TechRepublic".
TechRepublic
Palo Alto Networks discovers new cryptojacking worm mining for Monero
This is the first time that a cryptojacking attack has been observed on Docker.
🕴 Data Privacy Protections for the Most Vulnerable - Children 🕴
📖 Read
via "Dark Reading: ".
The business case for why companies that respect the privacy of individuals, and especially minors, will have a strong competitive advantage.📖 Read
via "Dark Reading: ".
Dark Reading
Data Privacy Protections for the Most Vulnerable - Children
The business case for why companies that respect the privacy of individuals, and especially minors, will have a strong competitive advantage.
❌ Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS ❌
📖 Read
via "Threatpost".
The flaws in the container technology, CVE-2019-16276 and CVE-2019-11253, are simple to exploit.📖 Read
via "Threatpost".
Threat Post
Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
A pair of bugs in the Kubernetes open-source cloud container software can be “highly dangerous” under some Kubernetes configurations, according to researchers. The flaws, CVE-2019-16276 and CVE-2019-11253, have been patched in Kubernetes builds 1.14.8, 1.15.5…
❌ Cisco Aironet Access Points Plagued By Critical, High-Severity Flaws ❌
📖 Read
via "Threatpost".
Cisco has issued patches for critical and high-severity vulnerabilities in its Aironet access point devices.📖 Read
via "Threatpost".
Threat Post
Cisco Aironet Access Points Plagued By Critical, High-Severity Flaws
Cisco has issued patches for critical and high-severity vulnerabilities in its Aironet access point devices.
❌ Trump Campaign Website Left Open to Email Server Hijack ❌
📖 Read
via "Threatpost".
A misconfigured website development tool exposed hundreds of email servers to takeover, including President Donald Trump’s official campaign website.📖 Read
via "Threatpost".
Threat Post
Trump Campaign Website Left Open to Email Server Hijack
A misconfigured website development tool exposed hundreds of email servers to takeover, including President Donald Trump’s official campaign website.
🛠 Suricata IDPE 5.0.0 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and Barnyard2 tools.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Suricata IDPE 5.0.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Cozy Bear Emerges from Hibernation to Hack EU Ministries 🕴
📖 Read
via "Dark Reading: ".
The cyber-espionage group, linked to Russia and blamed for hacking the Democratic National Committee in 2016, has been using covert communications and other techniques to escape detection for at least two years.📖 Read
via "Dark Reading: ".
Darkreading
Cozy Bear Emerges from Hibernation to Hack EU Ministries
The cyber-espionage group, linked to Russia and blamed for hacking the Democratic National Committee in 2016, has been using covert communications and other techniques to escape detection for at least two years.
ATENTION‼ New - CVE-2015-9479 (acf_fronted_display)
📖 Read
via "National Vulnerability Database".
The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php.📖 Read
via "National Vulnerability Database".
🕴 Yahoo Breach Victims May Qualify for $358 Payout 🕴
📖 Read
via "Dark Reading: ".
Pending approval of the settlement, affected account holders may be eligible for a payout or two years of free credit monitoring.📖 Read
via "Dark Reading: ".
Dark Reading
Yahoo Breach Victims May Qualify for $358 Payout
Pending approval of the settlement, affected account holders may be eligible for a payout or two years of free credit monitoring.
❌ Hacking Back? BriansClub Dark Web Attack a Boon for Banks ❌
📖 Read
via "Threatpost".
The theft of 26 million card records from an underground site offers valuable intel for banks.📖 Read
via "Threatpost".
Threat Post
Hacking Back? BriansClub Dark Web Attack a Boon for Banks
The theft of 26 million card records from an underground site offers valuable intel for banks.
🔏 70 Percent of Healthcare Breach Data Could Lead to ID Theft 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
New research looks at 10 years of healthcare data breaches and breaks down the specific types of data exposed.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
70 Percent of Healthcare Breach Data Could Lead to ID Theft
New research looks at 10 years of healthcare data breaches and breaks down the specific types of data exposed.
🔐 How to find the Firefox Certificate Viewer 🔐
📖 Read
via "Security on TechRepublic".
Mozilla is set to launch a Certificate Viewer. Find out why and how to open it.📖 Read
via "Security on TechRepublic".
🕴 Smart Prevention: How Every Enterprise Can Create Human Firewalls 🕴
📖 Read
via "Dark Reading: ".
Organizations of all sizes should include both human firewalls and virtual tools in their cybersecurity budgets.📖 Read
via "Dark Reading: ".
Darkreading
Smart Prevention: How Every Enterprise Can Create Human Firewalls
Organizations of all sizes should include both human firewalls and virtual tools in their cybersecurity budgets.
🔐 How to find the Firefox Certificate Viewer 🔐
📖 Read
via "Security on TechRepublic".
Mozilla is set to launch a Certificate Viewer. Find out why and how to open it.📖 Read
via "Security on TechRepublic".
TechRepublic
How to find the Firefox Certificate Viewer
Mozilla is set to launch a Certificate Viewer. Find out why and how to open it.
ATENTION‼ New - CVE-2015-9482 (car_dealer_/_auto_dealer_responsive)
📖 Read
via "National Vulnerability Database".
The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2010-5334 (webclient)
📖 Read
via "National Vulnerability Database".
IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (_c to basic/index.html) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files.📖 Read
via "National Vulnerability Database".
🕴 State of SMB Insecurity by the Numbers 🕴
📖 Read
via "Dark Reading: ".
SMBs still perceive themselves at low risk from cyberthreats - in spite of attack statistics that paint a different picture.📖 Read
via "Dark Reading: ".
Darkreading
State of SMB Insecurity by the Numbers
SMBs still perceive themselves at low risk from cyberthreats — in spite of attack statistics that paint a different picture.
🕴 Phishing Campaign Targets Stripe Credentials, Financial Data 🕴
📖 Read
via "Dark Reading: ".
Attackers make use of an old trick and evade detection by blocking users from viewing an embedded link when hovering over the URL.📖 Read
via "Dark Reading: ".
Darkreading
Phishing Campaign Targets Stripe Credentials, Financial Data
Attackers make use of an old trick and evade detection by blocking users from viewing an embedded link when hovering over the URL.
🔐 How to add public SSH keys for users in Cockpit 🔐
📖 Read
via "Security on TechRepublic".
Adding public SSH keys with Cockpit can easily be handled by a Cockpit admin.📖 Read
via "Security on TechRepublic".
❌ Phorpiex Botnet Shifts Gears From Ransomware to Sextortion ❌
📖 Read
via "Threatpost".
A decade-old botnet is using infected computers to send out sextortion emails, in a wide-scale campaign with the potential to reach millions of victims.📖 Read
via "Threatpost".
Threat Post
Phorpiex Botnet Shifts Gears From Ransomware to Sextortion
A decade-old botnet is using infected computers to send out sextortion emails, in a large-scale campaign with the potential to reach millions of victims.