ATENTION‼ New - CVE-2005-3056
📖 Read
via "National Vulnerability Database".
TWiki allows arbitrary shell command execution via the Include function📖 Read
via "National Vulnerability Database".
⚠ Apple props up macOS Catalina with 10.15.1 update ⚠
📖 Read
via "Naked Security".
A vocal minority of the committed Apple base has been quick to express dissatisfaction at the move to Catalina from macOS 10.14 Mojave.📖 Read
via "Naked Security".
Naked Security
Apple props up macOS Catalina with 10.15.1 update
A vocal minority of the committed Apple base has been quick to express dissatisfaction at the move to Catalina from macOS 10.14 Mojave.
🔐 How to allow SSH connections from LAN and WAN on different ports 🔐
📖 Read
via "Security on TechRepublic".
Is it possible to configure SSH to listen for connections on both internal and external interfaces, using different ports? Jack Wallen says "yes."📖 Read
via "Security on TechRepublic".
TechRepublic
How to allow SSH connections from LAN and WAN on different ports
Is it possible to configure SSH to listen for connections on both internal and external interfaces, using different ports? Jack Wallen says "yes."
❌ Google Discloses Chrome Flaw Exploited in the Wild ❌
📖 Read
via "Threatpost".
Google warns exploits in the wild against a Use After Free vulnerability in Chrome's audio component.📖 Read
via "Threatpost".
Threat Post
Google Discloses Chrome Flaw Exploited in the Wild
Google warns exploits in the wild against a Use After Free vulnerability in Chrome's audio component.
🕴 8 Holiday Security Tips for Retailers 🕴
📖 Read
via "Dark Reading: ".
As retailers head into the holiday rush, here's how they can protect their businesses from attackers and scammers hoping to wreak havoc during the most wonderful time of the year.📖 Read
via "Dark Reading: ".
Dark Reading
8 Holiday Security Tips for Retailers
As retailers head into the holiday rush, here's how they can protect their businesses from attackers and scammers hoping to wreak havoc during the most wonderful time of the year.
⚠ S2 Ep15: City under attack! VPN hacked, floppies nixed ⚠
📖 Read
via "Naked Security".
A latest episode of the Naked Security podcast is out now!📖 Read
via "Naked Security".
Naked Security
S2 Ep15: City under attack! VPN hacked, floppies nixed
A latest episode of the Naked Security podcast is out now!
🕴 Google Patches Chrome Zero-Day Under Active Attack 🕴
📖 Read
via "Dark Reading: ".
The fix addresses CVE-2019-13720, a high-severity, use-after-free vulnerability discovered by Kaspersky Lab researchers.📖 Read
via "Dark Reading: ".
Darkreading
Google Patches Chrome Zero-Day Under Active Attack
The fix addresses CVE-2019-13720, a high-severity, use-after-free vulnerability discovered by Kaspersky Lab researchers.
❌ Stubborn Malware Targets QNAP NAS Hardware Specifically ❌
📖 Read
via "Threatpost".
QNAP Systems says there is no known way to remove the Qsnatch malware infecting its NAS devices besides a full factory reset.📖 Read
via "Threatpost".
Threat Post
Stubborn Malware Targets QNAP NAS Hardware Specifically
QNAP Systems says there is no known way to remove the Qsnatch malware infecting its NAS devices.
❌ Global Crime Ring Bilks U.S. Military Members, Vets Out of Millions ❌
📖 Read
via "Threatpost".
An elaborate fraudster ring stole PII then used DoD and VA benefits portals to steal payments and funds from bank accounts.📖 Read
via "Threatpost".
Threat Post
Global Crime Ring Bilks U.S. Military Members, Vets Out of Millions
An elaborate fraudster ring stole PII then allegedly used DoD and VA benefits portals to steal payments and funds from bank accounts.
🔐 How to copy a file from one server to another from a third with SSH 🔐
📖 Read
via "Security on TechRepublic".
Find out how to work some SSH magic, by transferring a file from one machine to another from a third.📖 Read
via "Security on TechRepublic".
TechRepublic
How to copy a file from one server to another from a third with SSH
Find out how to work some SSH magic, by transferring a file from one machine to another from a third.
🛠 Samhain File Integrity Checker 4.4.0 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Samhain File Integrity Checker 4.4.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 SQLMAP - Automatic SQL Injection Tool 1.3.11 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
SQLMAP - Automatic SQL Injection Tool 1.3.11 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Details of Attack on Electric Utility Emerge 🕴
📖 Read
via "Dark Reading: ".
The March 5 DDoS attack interrupted communications between generating facilities and the electrical grid in three western states.📖 Read
via "Dark Reading: ".
Darkreading
Details of Attack on Electric Utility Emerge
The March 5 DDoS attack interrupted communications between generating facilities and the electrical grid in three western states.
🔏 Friday Five: 11/1 Edition 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
The hackers behind Uber's 2016 breach finally plead guilty, WhatsApp pushes back against NSO Group, and an army admin steals millions from veterans - catch up on the week's news with the Friday Five.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five: 11/1 Edition
The hackers behind Uber's 2016 breach finally plead guilty, WhatsApp pushes back against NSO Group, and an army admin steals millions from veterans - catch up on the week's news with the Friday Five.
❌ News Wrap: APTs, Office 365 Voicemail Phish and Bed Bath & Beyond Breach ❌
📖 Read
via "Threatpost".
Threatpost editors discuss this week's biggest news - from a data breach of Bed Bath & Beyond, a tricky phishing attack and widespread APT activity. 📖 Read
via "Threatpost".
Threat Post
News Wrap: APTs, Office 365 Voicemail Phish and Bed Bath & Beyond Breach
Threatpost editors discuss this week's biggest news - from a data breach of Bed Bath & Beyond, a tricky phishing attack and widespread APT activity.
🔐 Wanted: More women hackers 🔐
📖 Read
via "Security on TechRepublic".
Capture the Flag challenge encourages women to pursue cybersecurity careers and connects experts with newcomers📖 Read
via "Security on TechRepublic".
TechRepublic
Wanted: More women hackers
Capture the Flag challenge encourages women to pursue cybersecurity careers and connects experts with newcomers
ATENTION‼ New - CVE-2005-2351
📖 Read
via "National Vulnerability Database".
Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2005-2350
📖 Read
via "National Vulnerability Database".
Cross-site scripting (XSS) vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HTML code in the web user interface.📖 Read
via "National Vulnerability Database".
🕴 Free & Discounted Security Services Now Available for US Election Orgs 🕴
📖 Read
via "Dark Reading: ".
Nonprofit Defending Digital Campaigns (DDC) offers security services for email, user education, mobile, and encrypted communications, to federal election committees.📖 Read
via "Dark Reading: ".
Dark Reading
Free & Discounted Security Services Now Available for US Election Orgs
Nonprofit Defending Digital Campaigns (DDC) offers security services for email, user education, mobile, and encrypted communications, to federal election committees.
❌ Solar, Wind Power Utility Disrupted in Rare Cyberattack ❌
📖 Read
via "Threatpost".
A simple attack on an unpatched server could have been catastrophic for the Utah-based utility.📖 Read
via "Threatpost".
Threat Post
Solar, Wind Power Utility Disrupted in Rare Cyberattack
A simple attack on an unpatched server could have been catastrophic for the Utah-based utility.
❌ Office for Mac Users Warned of Malicious SYLK Files ❌
📖 Read
via "Threatpost".
Researchers warn XML macros embedded in SYLK files can sidestep Microsoft Office for Mac protections.📖 Read
via "Threatpost".
Threat Post
Office for Mac Users Warned of Malicious SYLK Files
Researchers warn XML macros embedded in SYLK files can sidestep Microsoft Office for Mac protections.