❌ 3 Critical Bugs Allow Remote Attacks on Cisco NX-OS and Switches ❌
📖 Read
via "Threatpost".
Cisco patched three authentication bypass bugs tied to its DCNM platform used to manages NX-OS.📖 Read
via "Threatpost".
Threat Post
3 Critical Bugs Allow Remote Attacks on Cisco NX-OS and Switches
Cisco patched three authentication bypass bugs tied to its DCNM platform used to manages NX-OS.
❌ Ransomware Attack Topples Telemarketing Firm, Leaving Hundreds Jobless ❌
📖 Read
via "Threatpost".
Days before Christmas, employees found out that The Heritage Company had been hit by a ransomware attack and was "temporarily suspending operations."📖 Read
via "Threatpost".
Threat Post
Ransomware Attack Topples Telemarketing Firm, Leaving Hundreds Jobless
Days before Christmas, employees found out that The Heritage Company had been hit by a ransomware attack and was "temporarily suspending operations."
ATENTION‼ New - CVE-2012-4451
📖 Read
via "National Vulnerability Database".
Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) Debug, (2) Feed\PubSubHubbub, (3) Log\Formatter\Xml, (4) Tag\Cloud\Decorator, (5) Uri, (6) View\Helper\HeadStyle, (7) View\Helper\Navigation\Sitemap, or (8) View\Helper\Placeholder\Container\AbstractStandalone, related to Escaper.📖 Read
via "National Vulnerability Database".
🕴 Cisco Drops a Dozen Vulnerability Patches 🕴
📖 Read
via "Dark Reading: ".
Among them are three for critical authentication bypass flaws.📖 Read
via "Dark Reading: ".
Dark Reading
Cisco Drops a Dozen Vulnerability Patches
Among them are three for critical authentication bypass flaws.
🕴 Ransomware Victim Southwire Sues Maze Operators 🕴
📖 Read
via "Dark Reading: ".
Attackers demanded $6 million from the wire and cable manufacturer when they launched a December ransomware campaign.📖 Read
via "Dark Reading: ".
Darkreading
Ransomware Victim Southwire Sues Maze Operators
Attackers demanded $6 million from the wire and cable manufacturer when they launched a December ransomware campaign.
ATENTION‼ New - CVE-2012-5878
📖 Read
via "National Vulnerability Database".
Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or (2) CSAttack.pl in frameworkgui/ or the (3) appURLPath parameter to frameworkgui/attachMobileModem.pl.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-5693
📖 Read
via "National Vulnerability Database".
Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to (1) remoteAttack.pl or (2) guessPassword.pl in frameworkgui/; the filename parameter to (3) CSAttack.pl or (4) SEAttack.pl in frameworkgui/; the phNo2Attack parameter to (5) CSAttack.pl or (6) SEAttack.pl in frameworkgui/; the (7) platformDD2 parameter to frameworkgui/SEAttack.pl; the (8) agentURLPath or (9) agentControlKey parameter to frameworkgui/attach2agents.pl; or the (10) controlKey parameter to frameworkgui/attachMobileModem.pl. NOTE: The hostingPath parameter to CSAttack.pl and SEAttack.pl vectors and the appURLPath parameter to attachMobileModem.pl vector are covered by CVE-2012-5878.📖 Read
via "National Vulnerability Database".
🔐 5 predictions for protecting data in the payments and security ecosystem 🔐
📖 Read
via "Security on TechRepublic".
As demand for personalization and seamless consumer experiences grow, security must keep up, said VISA's chief risk officer.📖 Read
via "Security on TechRepublic".
TechRepublic
5 predictions for protecting data in the payments and security ecosystem
As demand for personalization and seamless consumer experiences grow, security must keep up, said VISA's chief risk officer.
⚠ Monday review – the hot stories of the holidays ⚠
📖 Read
via "Naked Security".
From 'Greta Thunberg' malware to Python 3, get yourself up to date with everything we've written since Christmas.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot stories of the holidays
From ‘Greta Thunberg’ malware to Python 3, get yourself up to date with everything we've written since Christmas.
🕴 What Tools Will Find Misconfigurations in My AWS S3 Cloud Buckets? 🕴
📖 Read
via "Dark Reading: ".
Misconfigured cloud buckets leak sensitive data. Here's how to keep your Amazon Web Services (AWS) Simple Server Storage (S3) buckets secured.📖 Read
via "Dark Reading: ".
Dark Reading
What Tools Will Find Misconfigurations in My AWS S3 Cloud Buckets?
Misconfigured cloud buckets leak sensitive data. Here's how to keep your Amazon Web Services (AWS) Simple Server Storage (S3) buckets secured.
🕴 Client-Side JavaScript Risks & the CCPA 🕴
📖 Read
via "Dark Reading: ".
How California's new privacy law increases the liability for securing Web-facing user data, and what enterprises can do to mitigate their risk.📖 Read
via "Dark Reading: ".
Darkreading
Client-Side JavaScript Risks & the CCPA
How California's new privacy law increases the liability for securing Web-facing user data, and what enterprises can do to mitigate their risk.
❌ Hackers Deface U.S. Gov Website With Pro-Iran Messages ❌
📖 Read
via "Threatpost".
The Federal Depository Library Program (FDLP) website was defaced over the weekend to show a picture of a bloodied President Donald Trump.📖 Read
via "Threatpost".
Threat Post
Hackers Deface U.S. Gov Website With Pro-Iran Messages
The Federal Depository Library Program (FDLP) website was defaced over the weekend to show a picture of a bloodied President Donald Trump.
⚠ Don’t fall for the “Start your 2020 with a gift from us” scam… ⚠
📖 Read
via "Naked Security".
There is no free Macbook. There IS no free Macbook. There is NO free Macbook.📖 Read
via "Naked Security".
Naked Security
Don’t fall for the “Start your 2020 with a gift from us” scam…
There is no free MacBook. There IS no free MacBook. There is NO free MacBook.
🕴 Mimecast Acquires Segasec to Boost Phishing Defense 🕴
📖 Read
via "Dark Reading: ".
Segasec's technology will be integrated into Mimecast's email and Web security services to identify malicious domains.📖 Read
via "Dark Reading: ".
Dark Reading
Mimecast Acquires Segasec to Boost Phishing Defense
Segasec's technology will be integrated into Mimecast's email and Web security services to identify malicious domains.
❌ DeathRansom Campaign Linked to Malware Cornucopia ❌
📖 Read
via "Threatpost".
One threat actor appears to be behind several ongoing, related campaigns.📖 Read
via "Threatpost".
Threat Post
DeathRansom Campaign Linked to Malware Cornucopia
One threat actor appears to be behind several ongoing, related campaigns.
🕴 US Government Publishing Office Website Defaced 🕴
📖 Read
via "Dark Reading: ".
The Federal Depository Library Program (FDLP) website was attacked by a group of hackers claiming to represent the government of Iran.📖 Read
via "Dark Reading: ".
Darkreading
US Government Publishing Office Website Defaced
The Federal Depository Library Program (FDLP) website was attacked by a group of hackers claiming to represent the government of Iran.
🔏 Mozilla Allows Users to Delete Firefox Telemetry Data 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Companies like Mozilla are using the passage of the CCPA as a way to better empower users to delete their own personal data.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Mozilla Allows Users to Delete Firefox Telemetry Data
Companies like Mozilla are using the passage of the CCPA as a way to better empower users to delete their own personal data.
❌ Magecart Hits Parents and Students via Blue Bear Attack ❌
📖 Read
via "Threatpost".
The latest attack takes aim at a vertical-specific e-commerce platform.📖 Read
via "Threatpost".
Threat Post
Magecart Hits Parents and Students via Blue Bear Attack
The latest attack takes aim at a vertical-specific e-commerce platform.
❌ ToTok Returned to Google Play Despite ‘Spy Tool’ Claims ❌
📖 Read
via "Threatpost".
The communications app faces continued backlash after a New York Times report said it was used as a government spying tool.📖 Read
via "Threatpost".
Threat Post
ToTok Returned to Google Play Despite ‘Spy Tool’ Claims
The communications app faces continued backlash after a New York Times report said it was used as a government spying tool.
🔐 Comcast announces new Wi-Fi 6-certified gateway, security features for internet customers at CES 2020 🔐
📖 Read
via "Security on TechRepublic".
Comcast is making its internet service faster and more secure with new hardware and free security features that alerts customers to threats.📖 Read
via "Security on TechRepublic".
TechRepublic
Comcast announces new Wi-Fi 6-certified gateway, security features for internet customers at CES 2020
Comcast is making its internet service faster and more secure with new hardware and free security features that alerts customers to threats.
🕴 Malicious Google Play Apps Linked to SideWinder APT 🕴
📖 Read
via "Dark Reading: ".
The active attack involving three malicious Android applications is the first exploiting CVE-2019-2215, Trend Micro researchers report.📖 Read
via "Dark Reading: ".
Darkreading
Malicious Google Play Apps Linked to SideWinder APT
The active attack involving three malicious Android applications is the first exploiting CVE-2019-2215, Trend Micro researchers report.