❌ Google Discloses Android Camera Hijack Hack ❌
📖 Read
via "Threatpost".
Google has disclosed a now-fixed issue that enabled third-party apps to access a disturbing set of permissions for its Camera App built into Android phones.📖 Read
via "Threatpost".
Threat Post
Google Discloses Android Camera Hijack Hack
Google has disclosed a now-fixed issue that enabled third-party apps to access a disturbing set of permissions for its Camera App built into Android phones.
🕴 DDoS Attacks Up Sharply in Third Quarter of 2019 🕴
📖 Read
via "Dark Reading: ".
DDoS attacks of all sorts were up by triple-digit percentages, with smaller volume attacks growing most rapidly.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
❌ D-Link Adds More Buggy Router Models to ‘Won’t Fix’ List ❌
📖 Read
via "Threatpost".
The list of routers that have critical RCE bugs, that have reached end of life and that won’t get fixed has grown.📖 Read
via "Threatpost".
Threat Post
D-Link Adds More Buggy Router Models to ‘Won’t Fix’ List
The list of routers that have critical RCE bugs, that have reached end of life and that won’t get fixed has grown.
❌ 400 Vet Locations Nipped by Ryuk Ransomware ❌
📖 Read
via "Threatpost".
The infection apparently made its way in through third-party systems.📖 Read
via "Threatpost".
Threat Post
400 Vet Locations Nipped by Ryuk Ransomware
The infection apparently made its way in through third-party systems.
🕴 Attacker Mistake Botches Cyborg Ransomware Campaign 🕴
📖 Read
via "Dark Reading: ".
Cybercriminals attempted to install Cyborg ransomware on target machines by deceiving victims with a fraudulent Windows update.📖 Read
via "Dark Reading: ".
Darkreading
Attacker Mistake Botches Cyborg Ransomware Campaign
Cybercriminals attempted to install Cyborg ransomware on target machines by deceiving victims with a fraudulent Windows update.
ATENTION‼ New - CVE-2011-1145 (debian_linux, enterprise_linux, opensuse, unixodbc)
📖 Read
via "National Vulnerability Database".
The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.📖 Read
via "National Vulnerability Database".
🕴 Ransomware Surge & Living-Off-the-Land Tactics Remain Big Threats 🕴
📖 Read
via "Dark Reading: ".
Group-IB's and Rapid7's separate analysis of attack activity in recent months shows threat actors are making life harder for enterprise organizations in a variety of ways.📖 Read
via "Dark Reading: ".
Darkreading
Ransomware Surge & Living-Off-the-Land Tactics Remain Big Threats
Group-IB's and Rapid7's separate analysis of attack activity in recent months shows threat actors are making life harder for enterprise organizations in a variety of ways.
⚠ Adobe Acrobat and Reader 2015 reach end of support ⚠
📖 Read
via "Naked Security".
If you've been happily using Adobe Reader 2015 software for the last few years, you're in for a rude awakening.📖 Read
via "Naked Security".
Naked Security
Adobe Acrobat and Reader 2015 reach end of support
If you’ve been happily using Adobe Reader 2015 software for the last few years, you’re in for a rude awakening.
⚠ XSS security hole in Gmail’s dynamic email ⚠
📖 Read
via "Naked Security".
The bug was fixed at least a month ago so users receiving dynamic email content have one less thing to worry about.📖 Read
via "Naked Security".
Naked Security
XSS security hole in Gmail’s dynamic email
The bug was fixed at least a month ago so users receiving dynamic email content have one less thing to worry about.
⚠ Instagram stalker app Ghosty yanked from Play store ⚠
📖 Read
via "Naked Security".
It was sucking up private profiles by requiring users to hand over their logins, giving it access to whatever accounts they follow.📖 Read
via "Naked Security".
Naked Security
Instagram stalker app Ghosty yanked from Play store
It was sucking up private profiles by requiring users to hand over their logins, giving it access to whatever accounts they follow.
⚠ Update WhatsApp now: MP4 video bug exposes your messages ⚠
📖 Read
via "Naked Security".
A now-patched-hole could have allowed remote code execution that could have exposed files and messages. Update your WhatsApp now.📖 Read
via "Naked Security".
Naked Security
Update WhatsApp now: MP4 video bug exposes your messages
A now-patched-hole could have allowed remote code execution that could have exposed files and messages. Update your WhatsApp now.
❌ Hackers Dump 2.2M Gaming, Cryptocurrency Passwords Online ❌
📖 Read
via "Threatpost".
A data breach left personal information--including email and IP addresses and first and last names—exposed in public databases, according to Troy Hunt.📖 Read
via "Threatpost".
Threat Post
Hackers Dump 2.2M Gaming, Cryptocurrency Passwords Online
The passwords of more than 2.2 million users of a gaming and cryptocurrency website were dumped online after dual data breaches.
🔐 Macy's holiday breach highlights retailer need for encryption and scrutiny of third party systems 🔐
📖 Read
via "Security on TechRepublic".
Attackers were collecting user credit card information for an entire week from the Macy's website before they were alerted. Here's how retailers can protect themselves.📖 Read
via "Security on TechRepublic".
TechRepublic
Macy's holiday breach highlights retailer's need for encryption and scrutiny of third-party systems
Attackers were collecting user credit card information for an entire week from the Macy's website before they were alerted. Here's how retailers can protect themselves.
🕴 Vulnerability Could Give Criminals Camera Control on Millions of Android Smartphones 🕴
📖 Read
via "Dark Reading: ".
Vulnerability could allow an attacker to control the camera and storage without user knowledge or permission.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerability Could Give Criminals Camera Control on Millions of Android Smartphones
Unauthorized activities could be triggered even if a phone is locked, its screen is turned off, or a person is in the middle of a call.
🕴 Why Multifactor Authentication Is Now a Hacker Target 🕴
📖 Read
via "Dark Reading: ".
SIM swaps, insecure web design, phishing, and channel-jacking are four ways attackers are circumventing MFA technology, according to the FBI.📖 Read
via "Dark Reading: ".
Darkreading
Why Multifactor Authentication Is Now a Hacker Target
SIM swaps, insecure web design, phishing, and channel-jacking are four ways attackers are circumventing MFA technology, according to the FBI.
ATENTION‼ New - CVE-2010-4657 (debian_linux, enterprise_linux, php)
📖 Read
via "National Vulnerability Database".
PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.📖 Read
via "National Vulnerability Database".
🔐 Want to attain and retain customers? Adopt data privacy policies 🔐
📖 Read
via "Security on TechRepublic".
Customers won't buy services or products from companies if they don't trust how their data will be used, Cisco found.📖 Read
via "Security on TechRepublic".
TechRepublic
Want to attain and retain customers? Adopt data privacy policies
Customers won't buy services or products from companies if they don't trust how their data will be used, Cisco found.
❌ ThreatList: Admin Rights for Third Parties is the Norm ❌
📖 Read
via "Threatpost".
The majority give outside partners, contractors and suppliers administrative access -- without strong security policies in place.📖 Read
via "Threatpost".
Threat Post
ThreatList: Admin Rights for Third Parties is the Norm
The majority give outside partners, contractors and suppliers administrative access — without strong security policies in place.
❌ High-Severity Windows UAC Flaw Enables Privilege Escalation ❌
📖 Read
via "Threatpost".
Further details of the flaw, which has recently been patched by Microsoft, were disclosed Tuesday by researchers.📖 Read
via "Threatpost".
Threat Post
High-Severity Windows UAC Flaw Enables Privilege Escalation
Further details of the flaw, which has recently been patched by Microsoft, were disclosed Tuesday by researchers.
ATENTION‼ New - CVE-2011-1028
📖 Read
via "National Vulnerability Database".
The $smarty.template variable in Smarty3 allows attackers to possibly execute arbitrary PHP code via the sysplugins/smarty_internal_compile_private_special_variable.php file.📖 Read
via "National Vulnerability Database".