πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
ATENTIONβ€Ό New - CVE-2012-3490

The (1) my_popenv_impl and (2) my_spawnv functions in src/condor_utils/my_popen.cpp and the (3) systemCommand function in condor_vm-gahp/vmgahp_common.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the return value of setuid calls, which might cause a subprocess to be created with root privileges and allow remote attackers to gain privileges via unspecified vectors.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2012-2950

Gateway Geomatics MapServer for Windows before 3.0.6 contains a Local File Include Vulnerability which allows remote attackers to execute local PHP code and obtain sensitive information.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2012-2931

PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2012-2226

Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sensitive information or execute arbitrary code by uploading a malicious file.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2012-2142

The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2012-1915

EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xss_clean() Filter and perform XSS attacks.

πŸ“– Read

via "National Vulnerability Database".
ATENTIONβ€Ό New - CVE-2010-3282

389 Directory Server before 1.2.7.1 (aka Red Hat Directory Server 8.2) and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password (nsslapd-rootpw) in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensitive information by reading the log.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Attackers Increase Focus on North American Electric Utilities: Report πŸ•΄

Electric utilities continue to be a target of nation-state attackers, even before the latest tensions between Iran and the United States, says a critical-infrastructure security firm.

πŸ“– Read

via "Dark Reading: ".
⚠ Fake-review purge: Facebook boots 188 groups, eBay bans 140 shills ⚠

After a poke from the UK's watchdog, the companies promised to beef up filters to strain out those who write, buy and sell fluffy nonsense.

πŸ“– Read

via "Naked Security".
⚠ Ransomware pounces on California schools, Las Vegas trounces attack ⚠

We'll have one serving of whatever Las Vegas is eating and wish Pittsburg Unified School District good luck with getting unstuck.

πŸ“– Read

via "Naked Security".
⚠ Hackers use system weakness to rattle doors on Citrix systems ⚠

Attackers are using a serious bug in Citrix products to scan the internet for weaknesses, according to experts.

πŸ“– Read

via "Naked Security".
❌ Oil-and-Gas Specialist APT Pivots to U.S. Power Plants ❌

Researchers say that physically disruptive attacks aren't imminent, but an increased focus on U.S. electrical-grid operators doesn't bode well.

πŸ“– Read

via "Threatpost".
πŸ•΄ Study Points to Lax Focus on Cybersecurity πŸ•΄

Despite ranking at the top of respondents' concerns, organizations still show gaps in acting on cybersecurity, Society for Information Management (SIM) report finds.

πŸ“– Read

via "Dark Reading: ".
πŸ” How cybercriminals are using Microsoft Sway to launch phishing attacks πŸ”

Attackers are creating phishing sites from Sway, an effective approach as links for the domain are typically trusted, says security firm Avanan.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ 5 Tips on How to Build a Strong Security Metrics Framework πŸ•΄

The carpentry maxim 'measure twice, cut once' underscores the importance of timely, accurate, and regular metrics to inform security leaders' risk decisions.

πŸ“– Read

via "Dark Reading: ".
πŸ” Friday Five: 1/10 Edition πŸ”

Possible Iranian retaliation may include cyberattacks, laboratory testing company recieves lawsuit after data breach, and another school district hit with ransomware - catch up on the week's news with the Friday Five.

πŸ“– Read

via "Subscriber Blog RSS Feed ".
ATENTIONβ€Ό New - CVE-2011-4595

Pretty-Link WordPress plugin 1.5.2 has XSS

πŸ“– Read

via "National Vulnerability Database".
πŸ” PATSCAN platform detects hidden weapons, chemicals, and bombs πŸ”

At CES 2020, Patriot One Technologies explained its PATSCAN platform, which can detect hidden weapons and more without the perpetrator even knowing they've been scanned.

πŸ“– Read

via "Security on TechRepublic".
πŸ•΄ Indian National Pleads Guilty to Multimillion-Dollar Call Center Scam πŸ•΄

The India-based call centers scammed US victims out of millions of dollars between 2013 and 2016.

πŸ“– Read

via "Dark Reading: ".
⚠ Is the Y2K bug alive after all? ⚠

One way to patch the millennium bug was to move it, rather than actually to fix it... are we looking at Y2.02K?

πŸ“– Read

via "Naked Security".
❌ Lifeline Assistance Phone Users Targeted with β€˜Uninstallable’ Adware ❌

A Virgin Mobile-branded phone distributed by Assurance Wireless to low-income U.S. citizens has a trojan pre-installed that can download additional malware.

πŸ“– Read

via "Threatpost".