🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕴 7 Ways to Hang Up on Voice Fraud 🕴

Criminals are coming at us from all direction, including our phones. Don't answer that next call without reading this tips first.

📖 Read

via "Dark Reading: ".
🕴 How to Be a More Thoughtful & Safe Digital Citizen 🕴

Don't be a Billy ... or Jennie ... or Betty.

📖 Read

via "Dark Reading: ".
🕴 Practical Principles for Security Metrics 🕴

A proactive approach to cybersecurity requires the right tools, not more tools.

📖 Read

via "Dark Reading: ".
Federal Data Privacy Bill Takes Aim at Tech Giants

The COPRA legislation would provide GDPR-like data protections, and create a new FTC enforcement bureau.

📖 Read

via "Threatpost".
IoT Smartwatch Exposes Kids’ Personal, GPS Data

Yet another connected smartwatch for children has been discovered exposing personal and location data of kids - opening the door for various insidious threats.

📖 Read

via "Threatpost".
🕴 7 Ways to Hang Up on Voice Fraud 🕴

Criminals are coming at us from all direction, including our phones. Don't answer that next call without reading this tips first.

📖 Read

via "Dark Reading: ".
🛠 Packet Fence 9.2.0 🛠

PacketFence is a network access control (NAC) system. It is actively maintained and has been deployed in numerous large-scale institutions. It can be used to effectively secure networks, from small to very large heterogeneous networks. PacketFence provides NAC-oriented features such as registration of new network devices, detection of abnormal network activities including from remote snort sensors, isolation of problematic devices, remediation through a captive portal, and registration-based and scheduled vulnerability scans.

📖 Go!

via "Security Tool Files ≈ Packet Storm".
🕴 How to Get Prepared for Privacy Legislation 🕴

All the various pieces of legislation, both in the US and worldwide, can feel overwhelming. But getting privacy basics right is a solid foundation.

📖 Read

via "Dark Reading: ".
🕴 New Free Emulator Challenges Apple's Control of iOS 🕴

An open-source tool gives researchers and jailbreakers a free option for researching vulnerabilities in the operating system - and gives Apple a new headache.

📖 Read

via "Dark Reading: ".
🕴 Google Details Its Responses to Cyber Attacks, Disinformation 🕴

Government groups continue to attack user credentials and distribute disinformation according to a new blog post from Google's Threat Analysis Group.

📖 Read

via "Dark Reading: ".
🕴 Analysis of Jira Bug Stresses Impact of SSRF in Public Cloud 🕴

More than 3,100 Jira instances are still vulnerable to a server-side request forgery vulnerability patched in August.

📖 Read

via "Dark Reading: ".
SDKs Misused to Scrape Twitter, Facebook Account Info

Malicious mobile apps could be created to scrape and share profile information, email addresses and more.

📖 Read

via "Threatpost".
🔐 The sinister timing of deepfakes and the 2020 election 🔐

Education and legislation are needed to combat the significant threat of deepfakes.

📖 Read

via "Security on TechRepublic".
🕴 SQL Injection Errors No Longer the Top Software Security Issue 🕴

In newly updated Common Weakness Enumeration (CWE), SQL injection now ranks sixth.

📖 Read

via "Dark Reading: ".
ATENTION New - CVE-2011-2187

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentication.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2011-2177

OpenOffice.org v3.3 allows execution of arbitrary code with the privileges of the user running the OpenOffice.org suite tools.

📖 Read

via "National Vulnerability Database".
NSO Group President Defends Controversial Tactics

Firm defends controversial business offerings, claims it should be considered a force of good.

📖 Read

via "Threatpost".
🕴 A Cause You Care About Needs Your Cybersecurity Help 🕴

By donating their security expertise, infosec professionals are supporting non-profits, advocacy groups, and communities in-need.

📖 Read

via "Dark Reading: ".
ATENTION New - CVE-2011-2480

Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. A signedness error in the IEEE80211_IOC_CHANINFO ioctl allows a local unprivileged user to cause the kernel to copy large amounts of kernel memory back to the user, disclosing potentially sensitive information.

📖 Read

via "National Vulnerability Database".
ATENTION New - CVE-2011-2207

dirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to cause a denial of service (DOS) via a specially-crafted certificate.

📖 Read

via "National Vulnerability Database".
🕴 Edge Feature Section 🕴

Lorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the industry's standard dummy text ever since the 1500s, when an unknown printer took a galley of type and scrambled it to make a type specimen book

📖 Read

via "Dark Reading: ".