🛡 Cybersecurity & Privacy 🛡 - News
25.9K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🔐 How cybercriminals trick you into giving your information over the phone 🔐

IBM's Chief People Hacker Stephanie "Snow" Carruthers describes how criminals use caller ID spoofing to get your private data.

📖 Read

via "Security on TechRepublic".
🔐 Microsoft is ending support for Windows 7 and Windows Server 2008: Here's what you need to know. 🔐

Support for Windows 7 and Server 2008 is ending in January 2020. Here's how to protect your systems.

📖 Read

via "Security on TechRepublic".
🕴 Find New Talent, Don't Fight Over CISSPs: Insights from (ISC)2 COO 🕴

The skills gap will only be closed by attracting and retaining new talent. So don't limit your talent search to CISSPs, says the COO of the organization that issues the CISSP certification.

📖 Read

via "Dark Reading: ".
🕴 PayPal Upsets Microsoft as Phishers' Favorite Brand 🕴

Several factors edged the world's most popular payment service into the top spot.

📖 Read

via "Dark Reading: ".
Amazon Kindle, Embedded Devices Open to Code-Execution

Flaws in Das U-Boot affect third-party hardware that uses the universal bootloader as an underlying component.

📖 Read

via "Threatpost".
🕴 Kaspersky Lab Analysis Shines Light on DarkUniverse APT Group 🕴

Threat actor was active between 2009 and 2017, targeting military, government, and private organizations.

📖 Read

via "Dark Reading: ".
🕴 Capital One Shifts Its CISO to New Role 🕴

The bank is searching for a new chief information security officer months after its major data breach.

📖 Read

via "Dark Reading: ".
🕴 To Prove Cybersecurity's Worth, Create a Cyber Balance Sheet 🕴

How tying and measuring security investments to business impacts can elevate executives' understanding and commitment to cyber-risk reduction.

📖 Read

via "Dark Reading: ".
ATENTION New - CVE-2010-2250

Drupal 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2010-2243

A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.33 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current_clocksource results in an OOPS.

📖 Read

via "National Vulnerability Database".
Ex-Twitter Employees Spied on Saudi Dissidents: DoJ

The DoJ charges former Twitter employees for allegedly accessing thousands of accounts on behalf of Saudi Arabia.

📖 Read

via "Threatpost".
🔐 How to control location tracking on your iPhone in iOS 13 🔐

The latest version of iOS offers some convenient ways to manage location tracking by apps.

📖 Read

via "Security on TechRepublic".
🔏 Breaches at Two Maine Healthcare Providers Exposes Data on 52,000 🔏

Two breaches at healthcare providers in Maine recently led to the exposure of 52,000 patients' protected health information.

📖 Read

via "Subscriber Blog RSS Feed ".
🕴 How Can I Help My Team Manage Security Alerts? 🕴

Smart prioritization, great staff and supportive tools are a good start.

📖 Read

via "Dark Reading: ".
🕴 How Might I Be Worsening the Problem of Alert Fatigue? 🕴

Security operations must focus on three key areas: detection, response, and prediction.

📖 Read

via "Dark Reading: ".
🕴 How Can I Help My Team Manage Security Alerts? 🕴

Smart prioritization, great staff, and supportive tools are a good start.

📖 Read

via "Dark Reading: ".
🕴 TA542 Brings Back Emotet with Late September Spike 🕴

Overall volumes of banking Trojans and RATs increased during the third quarter, when Emotet was suspiciously absent until mid-September.

📖 Read

via "Dark Reading: ".
ATENTION New - CVE-2007-5743

viewvc 1.0.3 allows improper access control to files in a repository when using the "forbidden" configuration option.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2007-3915

Mondo 2.24 has insecure handling of temporary files.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2007-3732

In Linux 2.6 before 2.6.23, the TRACE_IRQS_ON function in iret_exc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRACE_IRQS_ON and before enabling interrupts, so that "current" references work. Without this, "current" used in the window between iret_exc and the middle of error_code where %fs is reset, would crash.

📖 Read

via "National Vulnerability Database".
🕴 Twitter & Trend Micro Fall Victim to Malicious Insiders 🕴

The companies are the latest on a long and growing list of organizations that have fallen victim to users with legitimate access to enterprise systems and data.

📖 Read

via "Dark Reading: ".