❌ Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS ❌
📖 Read
via "Threatpost".
The flaws in the container technology, CVE-2019-16276 and CVE-2019-11253, are simple to exploit.📖 Read
via "Threatpost".
Threat Post
Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
A pair of bugs in the Kubernetes open-source cloud container software can be “highly dangerous” under some Kubernetes configurations, according to researchers. The flaws, CVE-2019-16276 and CVE-2019-11253, have been patched in Kubernetes builds 1.14.8, 1.15.5…
❌ Cisco Aironet Access Points Plagued By Critical, High-Severity Flaws ❌
📖 Read
via "Threatpost".
Cisco has issued patches for critical and high-severity vulnerabilities in its Aironet access point devices.📖 Read
via "Threatpost".
Threat Post
Cisco Aironet Access Points Plagued By Critical, High-Severity Flaws
Cisco has issued patches for critical and high-severity vulnerabilities in its Aironet access point devices.
❌ Trump Campaign Website Left Open to Email Server Hijack ❌
📖 Read
via "Threatpost".
A misconfigured website development tool exposed hundreds of email servers to takeover, including President Donald Trump’s official campaign website.📖 Read
via "Threatpost".
Threat Post
Trump Campaign Website Left Open to Email Server Hijack
A misconfigured website development tool exposed hundreds of email servers to takeover, including President Donald Trump’s official campaign website.
🛠 Suricata IDPE 5.0.0 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Suricata is a network intrusion detection and prevention engine developed by the Open Information Security Foundation and its supporting vendors. The engine is multi-threaded and has native IPv6 support. It's capable of loading existing Snort rules and signatures and supports the Barnyard and Barnyard2 tools.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Suricata IDPE 5.0.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Cozy Bear Emerges from Hibernation to Hack EU Ministries 🕴
📖 Read
via "Dark Reading: ".
The cyber-espionage group, linked to Russia and blamed for hacking the Democratic National Committee in 2016, has been using covert communications and other techniques to escape detection for at least two years.📖 Read
via "Dark Reading: ".
Darkreading
Cozy Bear Emerges from Hibernation to Hack EU Ministries
The cyber-espionage group, linked to Russia and blamed for hacking the Democratic National Committee in 2016, has been using covert communications and other techniques to escape detection for at least two years.
ATENTION‼ New - CVE-2015-9479 (acf_fronted_display)
📖 Read
via "National Vulnerability Database".
The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php.📖 Read
via "National Vulnerability Database".
🕴 Yahoo Breach Victims May Qualify for $358 Payout 🕴
📖 Read
via "Dark Reading: ".
Pending approval of the settlement, affected account holders may be eligible for a payout or two years of free credit monitoring.📖 Read
via "Dark Reading: ".
Dark Reading
Yahoo Breach Victims May Qualify for $358 Payout
Pending approval of the settlement, affected account holders may be eligible for a payout or two years of free credit monitoring.
❌ Hacking Back? BriansClub Dark Web Attack a Boon for Banks ❌
📖 Read
via "Threatpost".
The theft of 26 million card records from an underground site offers valuable intel for banks.📖 Read
via "Threatpost".
Threat Post
Hacking Back? BriansClub Dark Web Attack a Boon for Banks
The theft of 26 million card records from an underground site offers valuable intel for banks.
🔏 70 Percent of Healthcare Breach Data Could Lead to ID Theft 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
New research looks at 10 years of healthcare data breaches and breaks down the specific types of data exposed.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
70 Percent of Healthcare Breach Data Could Lead to ID Theft
New research looks at 10 years of healthcare data breaches and breaks down the specific types of data exposed.
🔐 How to find the Firefox Certificate Viewer 🔐
📖 Read
via "Security on TechRepublic".
Mozilla is set to launch a Certificate Viewer. Find out why and how to open it.📖 Read
via "Security on TechRepublic".
🕴 Smart Prevention: How Every Enterprise Can Create Human Firewalls 🕴
📖 Read
via "Dark Reading: ".
Organizations of all sizes should include both human firewalls and virtual tools in their cybersecurity budgets.📖 Read
via "Dark Reading: ".
Darkreading
Smart Prevention: How Every Enterprise Can Create Human Firewalls
Organizations of all sizes should include both human firewalls and virtual tools in their cybersecurity budgets.
🔐 How to find the Firefox Certificate Viewer 🔐
📖 Read
via "Security on TechRepublic".
Mozilla is set to launch a Certificate Viewer. Find out why and how to open it.📖 Read
via "Security on TechRepublic".
TechRepublic
How to find the Firefox Certificate Viewer
Mozilla is set to launch a Certificate Viewer. Find out why and how to open it.
ATENTION‼ New - CVE-2015-9482 (car_dealer_/_auto_dealer_responsive)
📖 Read
via "National Vulnerability Database".
The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2010-5334 (webclient)
📖 Read
via "National Vulnerability Database".
IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (_c to basic/index.html) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files.📖 Read
via "National Vulnerability Database".
🕴 State of SMB Insecurity by the Numbers 🕴
📖 Read
via "Dark Reading: ".
SMBs still perceive themselves at low risk from cyberthreats - in spite of attack statistics that paint a different picture.📖 Read
via "Dark Reading: ".
Darkreading
State of SMB Insecurity by the Numbers
SMBs still perceive themselves at low risk from cyberthreats — in spite of attack statistics that paint a different picture.
🕴 Phishing Campaign Targets Stripe Credentials, Financial Data 🕴
📖 Read
via "Dark Reading: ".
Attackers make use of an old trick and evade detection by blocking users from viewing an embedded link when hovering over the URL.📖 Read
via "Dark Reading: ".
Darkreading
Phishing Campaign Targets Stripe Credentials, Financial Data
Attackers make use of an old trick and evade detection by blocking users from viewing an embedded link when hovering over the URL.
🔐 How to add public SSH keys for users in Cockpit 🔐
📖 Read
via "Security on TechRepublic".
Adding public SSH keys with Cockpit can easily be handled by a Cockpit admin.📖 Read
via "Security on TechRepublic".
❌ Phorpiex Botnet Shifts Gears From Ransomware to Sextortion ❌
📖 Read
via "Threatpost".
A decade-old botnet is using infected computers to send out sextortion emails, in a wide-scale campaign with the potential to reach millions of victims.📖 Read
via "Threatpost".
Threat Post
Phorpiex Botnet Shifts Gears From Ransomware to Sextortion
A decade-old botnet is using infected computers to send out sextortion emails, in a large-scale campaign with the potential to reach millions of victims.
ATENTION‼ New - CVE-2015-9481 (diplomat_|_political)
📖 Read
via "National Vulnerability Database".
The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.📖 Read
via "National Vulnerability Database".
🔐 How to add public SSH keys for users in Cockpit 🔐
📖 Read
via "Security on TechRepublic".
Adding public SSH keys with Cockpit can easily be handled by a Cockpit admin.📖 Read
via "Security on TechRepublic".
TechRepublic
How to add public SSH keys for users in Cockpit
Adding public SSH keys with Cockpit can easily be handled by a Cockpit admin.
🕴 Older Amazon Devices Subject to Old Wi-Fi Vulnerability 🕴
📖 Read
via "Dark Reading: ".
The vulnerability in first-generation Echoes and eight-generation Kindles lets an attacker wage man-in-the-middle attacks.📖 Read
via "Dark Reading: ".
Dark Reading
Older Amazon Devices Subject to Old Wi-Fi Vulnerability
The vulnerability in first-generation Echoes and eight-generation Kindles lets an attacker wage man-in-the-middle attacks.