ATENTION‼ New - CVE-2010-2472 (drupal)
📖 Read
via "National Vulnerability Database".
Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting (XSS) attack. This vulnerability is mitigated by the fact that an attacker must have a role with the 'administer languages' permission.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2010-2471 (debian_linux, drupal)
📖 Read
via "National Vulnerability Database".
drupal6 version 6.16 has open redirection📖 Read
via "National Vulnerability Database".
❌ Google’s Plan to Crunch Health Data on Millions of Patients Draws Fire ❌
📖 Read
via "Threatpost".
"Project Nightingale" is fully HIPAA-compliant, according to Google -- but researchers said they see big red flags for consumer data privacy.📖 Read
via "Threatpost".
Threat Post
Google’s Plan to Crunch Health Data on Millions of Patients Draws Fire
"Project Nightingale" is fully HIPAA-compliant, according to Google — but researchers said they see big red flags for consumer data privacy.
🕴 Breaches Are Inevitable, So Embrace the Chaos 🕴
📖 Read
via "Dark Reading: ".
Avoid sinking security with principles of shipbuilding known since the 15th century.📖 Read
via "Dark Reading: ".
Darkreading
Breaches Are Inevitable, So Embrace the Chaos
Avoid sinking security with principles of shipbuilding known since the 15th century.
ATENTION‼ New - CVE-2010-2450 (debian_linux, service_provider)
📖 Read
via "National Vulnerability Database".
The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2007-6745 (clamav, debian_linux)
📖 Read
via "National Vulnerability Database".
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.📖 Read
via "National Vulnerability Database".
🕴 2019 Trending as Worst Year on Record for Data Breaches 🕴
📖 Read
via "Dark Reading: ".
New Risk Based Security report shows data breaches up 33.3% over last year so far.📖 Read
via "Dark Reading: ".
Darkreading
2019 Trending as Worst Year on Record for Data Breaches
New Risk Based Security report shows data breaches up 33.3% over last year so far.
🔏 Insider Stole Billion Dollar Battery Trade Secrets 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Yet another Chinese national - this time an employee at an Oklahoma petroleum company - has pleaded guilty to trade secret theft.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Insider Stole Billion Dollar Battery Trade Secrets
Yet another Chinese national - this time an employee at an Oklahoma petroleum company - has pleaded guilty to trade secret theft.
🕴 The Ripple Effect of Data Breaches: How Damage Spreads 🕴
📖 Read
via "Dark Reading: ".
The financial loss from so-called 'ripple events' is thirteen times greater than the cost of single-party security incidents.📖 Read
via "Dark Reading: ".
Darkreading
The Ripple Effect of Data Breaches: How Damage Spreads
The financial loss from so-called 'ripple events' is thirteen times greater than the cost of single-party security incidents.
🔐 Tracking endpoints and ensuring device security a vexing problem for healthcare CIOs 🔐
📖 Read
via "Security on TechRepublic".
The consequences of security incidents in hospitals can be life-or-death, but security practices lag behind other industries.📖 Read
via "Security on TechRepublic".
TechRepublic
Tracking endpoints and ensuring device security a vexing problem for healthcare CIOs
The consequences of security incidents in hospitals can be life-or-death, but security practices lag behind other industries.
🕴 Cybersecurity: An Organizationwide Responsibility 🕴
📖 Read
via "Dark Reading: ".
C-suite execs must set an example of good practices while also supporting the IT department with enough budget to protect the organization from next-generation cyberattacks.📖 Read
via "Dark Reading: ".
Darkreading
Cybersecurity: An Organizationwide Responsibility
C-suite execs must set an example of good practices while also supporting the IT department with enough budget to protect the organization from next-generation cyberattacks.
ATENTION‼ New - CVE-2008-3278 (frysk)
📖 Read
via "National Vulnerability Database".
frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binaries in /usr/bin/f* (e.g. fcore, fcatch, fstack, fstep, ...) shipped in the package. A local attacker can exploit this vulnerability by running arbitrary code as another user.📖 Read
via "National Vulnerability Database".
❌ Consumer Data Privacy Rights: Emerging Tech Blurs Lines ❌
📖 Read
via "Threatpost".
Data privacy is a fundamental right for Americans - but new emerging technologies like drone, IoT and facial recognition are introducing gray areas.📖 Read
via "Threatpost".
Threat Post
Consumer Data Privacy Rights: Emerging Tech Blurs Lines
Data privacy is a fundamental right for Americans - but new emerging technologies like drone, IoT and facial recognition are introducing gray areas.
🕴 Self-Cleaning Payment Card-Skimmer Infects E-Commerce Sites 🕴
📖 Read
via "Dark Reading: ".
'Pipka' JavaScript skimmer has infected at least 16 e-commerce websites so far, according to Visa's Payment Fraud Disruption Group.📖 Read
via "Dark Reading: ".
Dark Reading
Self-Cleaning Payment Card-Skimmer Infects E-Commerce Sites
'Pipka' JavaScript skimmer has infected at least 16 e-commerce websites so far, according to Visa's Payment Fraud Disruption Group.
⚠ Alleged mastermind behind $20m stolen-card site extradited to US ⚠
📖 Read
via "Naked Security".
Aleksei Burkov allegedly ran Cardplanet, advertised as the only shop with a guarantee: your stolen card will work, or you get a new one!📖 Read
via "Naked Security".
Naked Security
Alleged mastermind behind $20m stolen-card site extradited to US
Aleksei Burkov allegedly ran Cardplanet, advertised as the only shop with a guarantee: your stolen card will work, or you get a new one!
⚠ Warrantless searches of devices at US borders ruled unconstitutional ⚠
📖 Read
via "Naked Security".
The border is NOT a constitution-free zone, according to the ruling: No more suspicionless fishing expeditions into travelers' devices.📖 Read
via "Naked Security".
Naked Security
Warrantless searches of devices at US borders ruled unconstitutional
The border is NOT a constitution-free zone, according to the ruling: No more suspicionless fishing expeditions into travelers’ devices.
❌ Innovative PureLocker Ransomware Emerges in Targeted Attacks ❌
📖 Read
via "Threatpost".
PureLocker is an example of the sustained and continuing efforts ransomware threat actors are putting into malware development.📖 Read
via "Threatpost".
Threat Post
Innovative PureLocker Ransomware Emerges in Targeted Attacks
PureLocker is an example of the sustained and continuing efforts ransomware threat actors are putting into malware development.
⚠ Facebook fixes iPhone camera bug ⚠
📖 Read
via "Naked Security".
Facebook was quick to reassure iPhone users this week that it wasn’t secretly spying on them via its app, after someone found the software keeping the phone’s rear camera active in the background.📖 Read
via "Naked Security".
Naked Security
Facebook fixes iPhone camera bug
Facebook was quick to reassure iPhone users this week that it wasn’t secretly spying on them via its app, after someone found the software keeping the phone’s rear camera active in the background.…
❌ ENFUSE 2019: Security Regulations, Insider Threats, and IoT Privacy Risks ❌
📖 Read
via "Threatpost".
Threatpost sits down with incident response expert Kevin Golas to discuss the top takeaways of ENFUSE 2019 this week.📖 Read
via "Threatpost".
Threat Post
ENFUSE 2019: Security Regulations, Insider Threats, and IoT Privacy Risks
Threatpost sits down with incident response expert Kevin Golas to discuss the top takeaways of ENFUSE 2019 this week.