❌ Mobile Carrier Customer Service Ushers in SIM-Swap Fraud ❌
📖 Read
via "Threatpost".
Weak challenge questions by customer service reps make it easy for fraudsters to hijack a phone line and bypass 2FA to breach accounts.📖 Read
via "Threatpost".
Threat Post
Mobile Carrier Customer Service Ushers in SIM-Swap Fraud
Weak challenge questions by customer service reps make it easy for fraudsters to hijack a phone line and bypass 2FA to breach accounts.
ATENTION‼ New - CVE-2007-6070
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-1382. Reason: This candidate is a reservation duplicate of CVE-2008-1382. Notes: All CVE users should reference CVE-2008-1382 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.📖 Read
via "National Vulnerability Database".
❌ Feds Cut Off Access to Billions of Breached Records with Site Takedown ❌
📖 Read
via "Threatpost".
The WeLeakInfo "data breach notification" domain is no more.📖 Read
via "Threatpost".
Threat Post
Feds Cut Off Access to Billions of Breached Records with Site Takedown
The WeLeakInfo "data breach notification" domain is no more.
❌ New JhoneRAT Malware Targets Middle East ❌
📖 Read
via "Threatpost".
Researchers say that JhoneRAT has various anti-detection techniques - including making use of Google Drive, Google Forms and Twitter.📖 Read
via "Threatpost".
Threat Post
New JhoneRAT Malware Targets Middle East
Researchers say that JhoneRAT has various anti-detection techniques - including making use of Google Drive, Google Forms and Twitter.
🔐 This new startup aims to make developers love security 🔐
📖 Read
via "Security on TechRepublic".
Commentary: As more workloads move to the cloud, developers need help with security. Find out how the startup Cyral is helping to improve data security in the cloud.📖 Read
via "Security on TechRepublic".
TechRepublic
This new startup aims to make developers love security
Commentary: As more workloads move to the cloud, developers need help with security. Find out how the startup Cyral is helping to improve data security in the cloud.
⚠ Monday review – the hot 27 stories of the week ⚠
📖 Read
via "Naked Security".
From nasty snakes to rickrolling the NSA, get up to date with everything we've written in the last seven days - it's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 27 stories of the week
From nasty snakes to rickrolling the NSA, get up to date with everything we’ve written in the last seven days – it’s weekly roundup time.
⚠ Facebook and Instagram ban alleged ‘brainwashing’ service ⚠
📖 Read
via "Naked Security".
The Spinner personalises “subconscious influencing” for a specific target.📖 Read
via "Naked Security".
Naked Security
Facebook and Instagram ban alleged ‘brainwashing’ service
The Spinner personalises “subconscious influencing” for a specific target.
⚠ Teen entered ‘dark rabbit hole of suicidal content’ online ⚠
📖 Read
via "Naked Security".
Molly Russell's grieving father has backed a psychiatrists' report, saying that tech companies must be forced to hand over anonymized data.📖 Read
via "Naked Security".
Naked Security
Teen entered ‘dark rabbit hole of suicidal content’ online
Molly Russell’s grieving father has backed a psychiatrists’ report, saying that tech companies must be forced to hand over anonymized data.
⚠ FBI to inform election officials about hacking attempts ⚠
📖 Read
via "Naked Security".
The FBI has announced that it will tell local election officials when hackers try to infiltrate their systems.📖 Read
via "Naked Security".
Naked Security
FBI to inform election officials about hacking attempts
The FBI has announced that it will tell local election officials when hackers try to infiltrate their systems.
⚠ FBI seizes credentials-for-sale site WeLeakInfo.com ⚠
📖 Read
via "Naked Security".
The FBI has seized the domain for WeLeakInfo.com, a site that sold breached data records, after a multinational effort by law enforcement.📖 Read
via "Naked Security".
Naked Security
FBI seizes credentials-for-sale site WeLeakInfo.com
The FBI has seized the domain for WeLeakInfo.com, a site that sold breached data records, after a multinational effort by law enforcement.
🕴 Are We Secure Yet? How to Build a "Post-Breach" Culture 🕴
📖 Read
via "Dark Reading: ".
There are many ways to improve your organization's cybersecurity practices, but the most important principle is to start from the top.📖 Read
via "Dark Reading: ".
Dark Reading
Are We Secure Yet? How to Build a Post-Breach Culture
There are many ways to improve your organization's cybersecurity practices, but the most important principle is to start from the top.
🛠 Maavi Fuzzing Utility 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Maavi is a fuzzing tool that scans for vulnerabilities with obfuscated payloads. Has proxy support, records full history of actions, and has various bells and whistles.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Maavi Fuzzing Utility ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🔏 New Bill Would Aid CCPA Compliance for HIPAA Business Associates 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
A new bill in California would amend the CCPA and further health data exemptions - namely data that's been de-identified in the eyes of HIPAA.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
New Bill Would Aid CCPA Compliance for HIPAA Business Associates
A new bill in California would amend the CCPA and further health data exemptions - namely data that's been de-identified in the eyes of HIPAA.
🕴 Are We Secure Yet? How to Build a 'Post-Breach' Culture 🕴
📖 Read
via "Dark Reading: ".
There are many ways to improve your organization's cybersecurity practices, but the most important principle is to start from the top.📖 Read
via "Dark Reading: ".
Darkreading
Are We Secure Yet? How to Build a 'Post-Breach' Culture
There are many ways to improve your organization's cybersecurity practices, but the most important principle is to start from the top.
🔐 How to access your 2FA Docker Hub account from the command line 🔐
📖 Read
via "Security on TechRepublic".
With 2FA enabled on your Docker Hub account, you'll find you cannot access it with your user password from within the CLI. Jack Wallen shows you how to make this work.📖 Read
via "Security on TechRepublic".
TechRepublic
How to access your 2FA Docker Hub account from the command line
With 2FA enabled on your Docker Hub account, you'll find you cannot access it with your user password from within the CLI. Jack Wallen shows you how to make this work.
⚠ What do online file sharers want with 70,000 Tinder images? ⚠
📖 Read
via "Naked Security".
A researcher has discovered thousands of Tinder users' images publicly available for free online.📖 Read
via "Naked Security".
Naked Security
What do online file sharers want with 70,000 Tinder images?
A researcher has discovered thousands of Tinder users’ images publicly available for free online.
ATENTION‼ New - CVE-2019-10581
📖 Read
via "National Vulnerability Database".
NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, MDM9206, MDM9207C, MDM9607, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8998, Nicobar, QCS605, Rennell, SA6155P, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-10579
📖 Read
via "National Vulnerability Database".
Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCS605, QM215, Rennell, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-10578
📖 Read
via "National Vulnerability Database".
Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCS605, QM215, Rennell, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-10561
📖 Read
via "National Vulnerability Database".
Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9206, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QM215, SDA660, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660📖 Read
via "National Vulnerability Database".