⚠ Facebook to pay $550m to settle face-tagging suit ⚠
📖 Read
via "Naked Security".
A class-action lawsuit against Facebook for the use of its tag suggestions feature looks like it's finally done churning through the courts.📖 Read
via "Naked Security".
Naked Security
Facebook to pay $550m to settle face-tagging suit
A class-action lawsuit against Facebook for the use of its tag suggestions feature looks like it’s finally done churning through the courts.
❌ Microsoft Offers Rewards of Up to $20,000 in New Xbox Bug Bounty Program ❌
📖 Read
via "Threatpost".
Program is the latest the tech giant has launched that pay users and security researchers to find vulnerabilities in its numerous products.📖 Read
via "Threatpost".
Threat Post
Microsoft Offers Rewards of Up to $20,000 in New Xbox Bug Bounty Program
Program is the latest the tech giant has launched that pay users and security researchers to find vulnerabilities in its numerous products.
⚠ Financial tech firms disagree on ban of customer data screen-scraping ⚠
📖 Read
via "Naked Security".
They use it to offer things like budgeting apps. It puts passwords and privacy at risk, but some say they can't afford to build APIs instead.📖 Read
via "Naked Security".
Naked Security
Financial tech firms disagree on ban of customer data screen-scraping
They use it to offer things like budgeting apps. It puts passwords and privacy at risk, but some say they can’t afford to build APIs instead.
⚠ US Interior Dept extends drone grounding over foreign hacking fears ⚠
📖 Read
via "Naked Security".
The DOI has doubled down on a previous order, keeping the agency’s drones grounded for another 30 days for a more in-depth security review.📖 Read
via "Naked Security".
Naked Security
US Interior Dept extends drone grounding over foreign hacking fears
The DOI has doubled down on a previous order, keeping the agency’s drones grounded for another 30 days for a more in-depth security review.
⚠ UN hacked via unpatched SharePoint server ⚠
📖 Read
via "Naked Security".
UN staffers: the "entire domain" was probably compromised by an attacker who was lurking on the UN's networks.📖 Read
via "Naked Security".
Naked Security
UN hacked via unpatched SharePoint server
UN staffers: the “entire domain” was probably compromised by an attacker who was lurking on the UN’s networks.
❌ Sodinokibi Ransomware Group Sponsors Hacking Contest ❌
📖 Read
via "Threatpost".
Larger winnings for underground skills competitions are attracting sophisticated crime groups.📖 Read
via "Threatpost".
Threat Post
Sodinokibi Ransomware Group Sponsors Hacking Contest
Larger winnings for underground skills competitions are attracting sophisticated crime groups.
🔐 How to avoid the mistakes made in the UN data breach 🔐
📖 Read
via "Security on TechRepublic".
Falling prey to a hacker because it neglected to properly patch its systems, the United Nations also failed to publicly disclose the hack. Here's how your organization can avoid the same mistakes.📖 Read
via "Security on TechRepublic".
TechRepublic
How to avoid the mistakes made in the UN data breach
Falling prey to a hacker because it neglected to properly patch its systems, the United Nations also failed to publicly disclose the hack. Here's how your organization can avoid the same mistakes.
🛠 Lulzbuster 1.1.0 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Lulzbuster is a very fast and smart web directory and file enumeration tool written in C.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Lulzbuster 1.1.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 TOR Virtual Network Tunneling Tool 0.4.2.6 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers (ISPs).📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
TOR Virtual Network Tunneling Tool 0.4.2.6 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Faraday 3.10.2 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use the available tools in the community to take advantage of them in a multiuser way.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Faraday 3.10.2 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ Zero Day Initiative Bug Hunters Rake in $1.5M in 2019 ❌
📖 Read
via "Threatpost".
Microsoft OS flaws, out-of-bounds reads, ICS gear and a record number of high-severity bugs marked 2019 for the ZDI program.📖 Read
via "Threatpost".
Threat Post
Zero Day Initiative Bug Hunters Rake in $1.5M in 2019
Microsoft OS flaws, out-of-bounds reads, ICS gear and a record number of high-severity bugs marked 2019 for the ZDI program.
🔐 How to change iOS 13 settings for better security 🔐
📖 Read
via "Security on TechRepublic".
Learn how to secure your iOS 13 devices and protect your privacy by tweaking the default settings.📖 Read
via "Security on TechRepublic".
TechRepublic
How to change iOS 13 settings for better security
Learn how to secure your iOS 13 devices and protect your privacy by tweaking the default settings.
⚠ Serious Security – How ‘special case’ code blew a hole in OpenSMTPD ⚠
📖 Read
via "Naked Security".
Patch now before you receive a message that's more than just bad news!📖 Read
via "Naked Security".
Naked Security
Serious Security – How ‘special case’ code blew a hole in OpenSMTPD
Patch now before you receive a message that’s more than just bad news!
🕴 AppSec Concerns Drove 61% of Businesses to Change Applications 🕴
📖 Read
via "Dark Reading: ".
According to new Dark Reading research, some respondents have even left behind commercial off-the-shelf software and migrated to open-source or in-house homegrown applications. Click image to read more.📖 Read
via "Dark Reading: ".
Dark Reading
AppSec Concerns Drove 61% of Businesses to Change Applications
According to new Dark Reading research, some respondents have even left behind commercial off-the-shelf software and migrated to open-source or in-house homegrown applications. Click image to read more.
🔏 Friday Five: 1/31 Edition 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
The state of New York may ban ransomware payments, NFL Twitter accounts get hacked, and Facebook releases a new data privacy tool for users - catch up on the week's news with the Friday Five.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five: 1/31 Edition
The state of New York may ban ransomware payments, NFL Twitter accounts get hacked, and Facebook releases a new data privacy tool for users - catch up on the week's news with the Friday Five.
ATENTION‼ New - CVE-2011-4117
📖 Read
via "National Vulnerability Database".
The Batch::BatchRun module 1.03 for Perl does not properly handle temporary files.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-4116
📖 Read
via "National Vulnerability Database".
_is_safe in the File::Temp module for Perl does not properly handle symlinks.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-4115
📖 Read
via "National Vulnerability Database".
Parallel::ForkManager module before 1.0.0 for Perl does not properly handle temporary files.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-4088
📖 Read
via "National Vulnerability Database".
ABRT might allow attackers to obtain sensitive information from crash reports.📖 Read
via "National Vulnerability Database".