⚠ Android camera bug could have turned phones against their users ⚠
📖 Read
via "Naked Security".
Google has patched a bug in the Android camera app that allowed other applications to bypass the strict controls on camera and audio access.📖 Read
via "Naked Security".
Naked Security
Android camera bug could have turned phones against their users
Google has patched a bug in the Android camera app that allowed other applications to bypass the strict controls on camera and audio access.
🕴 The 'Department of No': Why CISOs Need to Cultivate a Middle Way 🕴
📖 Read
via "Dark Reading: ".
A chief information security officer's job inherently involves conflict, but a go-along-to-get-along approach carries its own vulnerabilities and risks.📖 Read
via "Dark Reading: ".
Dark Reading
The 'Department of No': Why CISOs Need to Cultivate a Middle Way
A chief information security officer's job inherently involves conflict, but a go-along-to-get-along approach carries its own vulnerabilities and risks.
⚠ DNS-over-HTTPS is coming to Windows 10 ⚠
📖 Read
via "Naked Security".
Microsoft will soon add the ability to use DNS-over-HTTPS and DNS-over-TLS into its networking client.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 6 Top Nontechnical Degrees for Cybersecurity 🕴
📖 Read
via "Dark Reading: ".
A computer science degree isn't the only path into a cybersecurity career.📖 Read
via "Dark Reading: ".
Dark Reading
6 Top Nontechnical Degrees for Cybersecurity
A computer science degree isn't the only path into a cybersecurity career.
❌ Gnip Banking Trojan Shows Ongoing, Aggressive Development ❌
📖 Read
via "Threatpost".
The mobile malware, which incorporates Anubis source code, could evolve into a fully fledged spyware in the future.📖 Read
via "Threatpost".
Threat Post
Gnip Banking Trojan Shows Ongoing, Aggressive Development
The mobile malware, which incorporates Anubis source code, could evolve into a fully fledged spyware in the future.
❌ Linux Webmin Servers Under Attack by Roboto P2P Botnet ❌
📖 Read
via "Threatpost".
A newly-discovered peer-to-peer (P2P) botnet has been found targeting a remote code execution vulnerability in Linux Webmin servers.📖 Read
via "Threatpost".
Threat Post
Linux Webmin Servers Under Attack by Roboto P2P Botnet
A newly-discovered peer-to-peer (P2P) botnet has been found targeting a remote code execution vulnerability in Webmin Linux servers.
🔐 75% of developers worry about app security, but half lack dedicated security experts on their team 🔐
📖 Read
via "Security on TechRepublic".
The majority of developers view security as integral to the coding and development process, but lack the support of a security expert, Whitehat Security found.📖 Read
via "Security on TechRepublic".
TechRepublic
75% of developers worry about app security, but half lack dedicated security experts on their team
The majority of developers view security as integral to the coding and development process, but lack the support of a security expert, Whitehat Security found.
ATENTION‼ New - CVE-2009-5047 (debian_linux, jetty)
📖 Read
via "National Vulnerability Database".
Jetty 6.x before 6.1.22 suffers from an escape sequence injection vulnerability from two different vectors: 1) "Cookie Dump Servlet" and 2) Http Content-Length header. 1) A POST request to the form at "/test/cookie/" with the "Age" parameter set to a string throws a "java.lang.NumberFormatException" which reflects binary characters including ESC. These characters could be used to execute arbitrary commands or buffer dumps in the terminal. 2) The same attack in 1) can be exploited by requesting a page using an HTTP request "Content-Length" header set to a letteral string.📖 Read
via "National Vulnerability Database".
🕴 Google Increases Top Android Hacking Prize to $1M 🕴
📖 Read
via "Dark Reading: ".
Google expands its Android Security Rewards program and multiplies its top cash prize from $200,000 to $1 million.📖 Read
via "Dark Reading: ".
Dark Reading
Google Increases Top Android Hacking Prize to $1M
Google expands its Android Security Rewards program and multiplies its top cash prize from $200,000 to $1 million.
🕴 3 Fundamentals for Better Security and IT Management 🕴
📖 Read
via "Dark Reading: ".
Nail these security fundamentals, and your organization will be well-positioned to succeed next year and in the years to come.📖 Read
via "Dark Reading: ".
Darkreading
3 Fundamentals for Better Security and IT Management
Nail these security fundamentals, and your organization will be well-positioned to succeed next year and in the years to come.
❌ Microsoft Outlook for Android Bug Opens Door to XSS ❌
📖 Read
via "Threatpost".
Successful exploitation allows attackers to steal potentially sensitive information, change appearance of the web page, and perform phishing, spoofing and drive-by-download attacks.📖 Read
via "Threatpost".
Threat Post
Microsoft Outlook for Android Bug Opens Door to XSS
Successful exploitation allows attackers to steal potentially sensitive information, change appearance of the web page, and perform phishing, spoofing and drive-by-download attacks.
🔐 Business Email Compromise: 5 ways this fraud could happen and what can be done to prevent it 🔐
📖 Read
via "Security on TechRepublic".
Millions of dollars and loads of personal information is being stolen through a growing threat known as Business Email Compromise (BEC).📖 Read
via "Security on TechRepublic".
TechRepublic
Business Email Compromise: 5 ways this fraud could happen and what can be done to prevent it
Millions of dollars and loads of personal information is being stolen through a growing threat known as Business Email Compromise (BEC).
🔐 Business Email Compromise: 5 ways this fraud could happen and what can be done to prevent it 🔐
📖 Read
via "Security on TechRepublic".
Millions of dollars and loads of personal information is being stolen through a growing threat known as Business Email Compromise (BEC).📖 Read
via "Security on TechRepublic".
TechRepublic
Business Email Compromise: 5 ways this fraud could happen and what can be done to prevent it
Millions of dollars and loads of personal information is being stolen through a growing threat known as Business Email Compromise (BEC).
🕴 In the Market for a MSSP? Ask These Questions First 🕴
📖 Read
via "Dark Reading: ".
Not all managed security service providers are created equal. These questions can reveal whether you are hiring the right people to help secure your business.📖 Read
via "Dark Reading: ".
Dark Reading
In the Market for a MSSP? Ask These Questions First
Not all managed security service providers are created equal. These questions can reveal whether you are hiring the right people to help secure your business.
🕴 Government Agency Partners on New Tool for Election Security 🕴
📖 Read
via "Dark Reading: ".
The Cybersecurity and Infrastructure Security Agency has partnered with VotingWorks on an open source tool to aid election result audits.📖 Read
via "Dark Reading: ".
Dark Reading
Government Agency Partners on New Tool for Election Security
The Cybersecurity and Infrastructure Security Agency has partnered with VotingWorks on an open source tool to aid election result audits.
❌ Senators Demand Amazon Disclose Ring Privacy Policies ❌
📖 Read
via "Threatpost".
Amazon's Ring data collection policies are in the spotlight.📖 Read
via "Threatpost".
Threat Post
Senators Demand Amazon Disclose Ring Privacy Policies
Amazon's Ring data collection policies are in the spotlight.
🕴 Leaks of NSA, CIA Tools Have Leveled Nation-State Cybercriminal Capabilities 🕴
📖 Read
via "Dark Reading: ".
The wide availability of tools leaked by the Shadow Brokers and WikiLeaks in 2016 and 2017 have given emerging cyber powers a way to catch up, DarkOwl says.📖 Read
via "Dark Reading: ".
Darkreading
Leaks of NSA, CIA Tools Have Leveled Nation-State Cybercriminal Capabilities
The wide availability of tools leaked by the Shadow Brokers and WikiLeaks in 2016 and 2017 have given emerging cyber powers a way to catch up, DarkOwl says.
⚠ Convicted Nigerian fraudster keeps a-fraudin’ from behind bars ⚠
📖 Read
via "Naked Security".
He was supposed to be serving a 24-year sentence in the "maximum security" prison, not continuing the fraud... and going to parties.📖 Read
via "Naked Security".
Naked Security
Convicted Nigerian fraudster keeps a-fraudin’ from behind bars
He was supposed to be serving a 24-year sentence in the “maximum security” prison, not continuing the fraud… and going to parties.
⚠ Why do cryptocurrency scams work and how do you avoid them? ⚠
📖 Read
via "Naked Security".
What are ICOs, why are they so popular and why do crooks love them so much?📖 Read
via "Naked Security".
Naked Security
Why cryptocoin scams work, and how to avoid them
What are ICOs, why are they so popular and why do crooks love them so much?
❌ Google Will Award $1M-Plus to People Who Can Hack Titan M Security Chip ❌
📖 Read
via "Threatpost".
The company expanded its Android bug bounty program as one of several recent moves to ramp up mobile security.📖 Read
via "Threatpost".
Threat Post
Google Will Award $1M-Plus to People Who Can Hack Titan M Security Chip
The company expanded its Android bug bounty program as one of several recent moves to ramp up mobile security.