πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
πŸ•΄ Gamification is Adding a Spoonful of Sugar to Security Training πŸ•΄

Gamification is becoming popular as companies look for new ways to keep employees from being their largest vulnerability.

πŸ“– Read

via "Dark Reading: ".
ATENTIONβ€Ό New - CVE-2011-1939

SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2011-1934

lilo-uuid-diskid causes lilo.conf to be world-readable in lilo 23.1.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2011-1933

SQL injection vulnerability in Jifty::DBI before 0.68.

πŸ“– Read

via "National Vulnerability Database".
πŸ” How Microsoft is using hardware to secure firmware πŸ”

Even full disk encryption can't keep you secure if your PC firmware is compromised, so Secured-core PCs will use the CPU to check if UEFI is telling the truth about secure boot.

πŸ“– Read

via "Security on TechRepublic".
⚠ Firefox gets tough on tracking tricks that sneakily sap your privacy ⚠

Firefox is getting ready to turn on its automatic anti-snooping tools to stop web 'fingerprinting" tricks.

πŸ“– Read

via "Naked Security".
⚠ Police arrest alleged Chuckling Squad member who hijacked @Jack Dorsey ⚠

Debug, another Chuckling Squadder, told Motherboard that the kid was weird, "Swatting celebrities for a follow back."

πŸ“– Read

via "Naked Security".
⚠ EU raises eyebrows at possible US encryption ban ⚠

EU officials have warned that they may not take kindly to a US encryption ban or insertion of crypto backdoor technology.

πŸ“– Read

via "Naked Security".
⚠ Splunk customers should update now to dodge Y2K-style bug ⚠

Splunk has issued a critical warning regarding a showstopping Y2K-style date bug in one of the platform’s configuration files.

πŸ“– Read

via "Naked Security".
⚠ Facebook, Twitter profiles slurped by mobile apps using malicious SDKs ⚠

Hundreds of users gave permission to these third-party apps to access their social media accounts, but the apps got more handsy than that.

πŸ“– Read

via "Naked Security".
πŸ” What is HIPAA Compliance? 2019 HIPAA Requirements πŸ”

Learn about the Health Insurance Portability and Accountability Act (HIPAA) and the requirements for HIPAA compliance in Data Protection 101, our series on the fundamentals of information security.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
❌ Dexphot Malware Hijacked 80K+ Devices to Mine Cryptocurrency ❌

A cryptomining malware has infected at least 80k devices and uses various tactics to evade detection.

πŸ“– Read

via "Threatpost".
πŸ•΄ 7 Ways to Hang Up on Voice Fraud πŸ•΄

Criminals are coming at us from all direction, including our phones. Don't answer that next call without reading this tips first.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ How to Be a More Thoughtful & Safe Digital Citizen πŸ•΄

Don't be a Billy ... or Jennie ... or Betty.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ Practical Principles for Security Metrics πŸ•΄

A proactive approach to cybersecurity requires the right tools, not more tools.

πŸ“– Read

via "Dark Reading: ".
❌ Federal Data Privacy Bill Takes Aim at Tech Giants ❌

The COPRA legislation would provide GDPR-like data protections, and create a new FTC enforcement bureau.

πŸ“– Read

via "Threatpost".
❌ IoT Smartwatch Exposes Kids’ Personal, GPS Data ❌

Yet another connected smartwatch for children has been discovered exposing personal and location data of kids - opening the door for various insidious threats.

πŸ“– Read

via "Threatpost".
πŸ•΄ 7 Ways to Hang Up on Voice Fraud πŸ•΄

Criminals are coming at us from all direction, including our phones. Don't answer that next call without reading this tips first.

πŸ“– Read

via "Dark Reading: ".
πŸ›  Packet Fence 9.2.0 πŸ› 

PacketFence is a network access control (NAC) system. It is actively maintained and has been deployed in numerous large-scale institutions. It can be used to effectively secure networks, from small to very large heterogeneous networks. PacketFence provides NAC-oriented features such as registration of new network devices, detection of abnormal network activities including from remote snort sensors, isolation of problematic devices, remediation through a captive portal, and registration-based and scheduled vulnerability scans.

πŸ“– Go!

via "Security Tool Files β‰ˆ Packet Storm".
πŸ•΄ How to Get Prepared for Privacy Legislation πŸ•΄

All the various pieces of legislation, both in the US and worldwide, can feel overwhelming. But getting privacy basics right is a solid foundation.

πŸ“– Read

via "Dark Reading: ".
πŸ•΄ New Free Emulator Challenges Apple's Control of iOS πŸ•΄

An open-source tool gives researchers and jailbreakers a free option for researching vulnerabilities in the operating system - and gives Apple a new headache.

πŸ“– Read

via "Dark Reading: ".