⚠ Update now – WhatsApp flaw gave attackers access to local files ⚠
📖 Read
via "Naked Security".
The flaw affecting WhatsApp's desktop client when it's paired with the iPhone app allowed attackers access to local file systems.📖 Read
via "Naked Security".
Naked Security
Update now – WhatsApp flaw gave attackers access to local files
The flaw affecting WhatsApp’s desktop client when it’s paired with the iPhone app allowed attackers access to local file systems.
🕴 RSAC Sets Finalists for Innovation Sandbox 🕴
📖 Read
via "Dark Reading: ".
The 10 finalists will each have three minutes to make their case for being the most innovative, promising young security company of the year.📖 Read
via "Dark Reading: ".
Dark Reading
RSAC Sets Finalists for Innovation Sandbox
The 10 finalists will each have three minutes to make their case for being the most innovative, promising young security company of the year.
⚠ S2 Ep25: You’ve seen WHAT on public Trello boards? – Naked Security Podcast ⚠
📖 Read
via "Naked Security".
New episode available now.📖 Read
via "Naked Security".
Naked Security
S2 Ep25: You’ve seen WHAT on public Trello boards? – Naked Security Podcast
New episode available now.
🔐 Beware of malware disguised as Oscar-nominated movies including Joker and Parasite 🔐
📖 Read
via "Security on TechRepublic".
Joker was the hottest film among cybercriminals with 304 malicious files named after Batman's arch-nemesis, says security firm Kaspersky.📖 Read
via "Security on TechRepublic".
TechRepublic
Beware of malware disguised as Oscar-nominated movies including Joker and Parasite
Joker was the hottest film among cybercriminals with 304 malicious files named after Batman's arch-nemesis, says security firm Kaspersky.
❌ The RSAC 2020 Trend Report ❌
📖 Read
via "Threatpost".
What’s trending in cybersecurity? This year’s session submissions tell us.📖 Read
via "Threatpost".
Threat Post
The RSAC 2020 Trend Report
The RSAC 2020 Trend Report examines data from this year's submissions to provide a peek into what will be on the minds of security professionals in 2020.
🕴 Invisible Pixel Patterns Can Communicate Data Covertly 🕴
📖 Read
via "Dark Reading: ".
University researchers show that changing the brightness of monitor pixels can communicates data from air-gapped systems in a way not visible to human eyes.📖 Read
via "Dark Reading: ".
Darkreading
Invisible Pixel Patterns Can Communicate Data Covertly
University researchers show that changing the brightness of monitor pixels can communicate data from air-gapped systems in a way not visible to human eyes.
🔐 Why shortcuts lead to failure: Lessons from app disaster in Iowa 🔐
📖 Read
via "Security on TechRepublic".
Quality control and standard software dev process could have prevented extended delays in reporting the results of the 2020 Iowa Caucus.📖 Read
via "Security on TechRepublic".
TechRepublic
Why shortcuts lead to failure: Lessons from app disaster in Iowa caucus
Quality control and standard software dev process could have prevented extended delays in reporting the results of the 2020 Iowa Caucus.
🕴 A Matter of Trust 🕴
📖 Read
via "Dark Reading: ".
Has working in the cybersecurity industry affected your ability to trust? Take the poll now.📖 Read
via "Dark Reading: ".
Dark Reading
A Matter of Trust
Has working in the cybersecurity industry affected your ability to trust? Take the poll now.
❌ U.S. Finance Sector Hit with Targeted Backdoor Campaign ❌
📖 Read
via "Threatpost".
The powerful Minebridge backdoor gives cyberattackers full run of a victim's machine.📖 Read
via "Threatpost".
Threat Post
U.S. Finance Sector Hit with Targeted Backdoor Campaign
The powerful Minebridge backdoor gives cyberattackers full run of a victim's machine.
❌ Metamorfo Returns with Keylogger Trick to Target Financial Firms ❌
📖 Read
via "Threatpost".
The malware uses a tactic to force victims to retype passwords into their systems - which it tracks via a keylogger.📖 Read
via "Threatpost".
Threat Post
Metamorfo Returns with Keylogger Trick to Target Financial Firms
The malware uses a tactic to force victims to retype passwords into their systems - which it tracks via keylogging.
🕴 Facebook Tops Imitated Brands as Attackers Target Tech 🕴
📖 Read
via "Dark Reading: ".
Brand impersonators favor Facebook, Yahoo, Network, and PayPal in phishing attempts to steal credentials from victims.📖 Read
via "Dark Reading: ".
Dark Reading
Facebook Tops Imitated Brands as Attackers Target Tech
Brand impersonators favor Facebook, Yahoo, Network, and PayPal in phishing attempts to steal credentials from victims.
🔐 The postmortem: Shadow took lots of shortcuts with Iowa 2020 caucus app 🔐
📖 Read
via "Security on TechRepublic".
Extreme delays in reporting results shows "move fast and break things" is the wrong approach for election infrastructure, developers and business leaders say.📖 Read
via "Security on TechRepublic".
TechRepublic
The postmortem: Shadow took lots of shortcuts with Iowa 2020 caucus app
Extreme delays in reporting results shows "move fast and break things" is the wrong approach for election infrastructure, developers and business leaders say.
🕴 Cybersecurity Vendor Landscape Transforming as Symantec, McAfee Enter New Eras 🕴
📖 Read
via "Dark Reading: ".
Two years ago, Symantec and McAfee were both primed for a comeback. Today, both face big questions about their future.📖 Read
via "Dark Reading: ".
Dark Reading
Cyberattacks & Data Breaches recent news | Dark Reading
Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading
🕴 Forescout Acquired by Private Equity Team 🕴
📖 Read
via "Dark Reading: ".
The deal, valued at $1.9 billion, is expected to close next quarter.📖 Read
via "Dark Reading: ".
Dark Reading
Forescout Acquired by Private Equity Team
The deal, valued at $1.9 billion, is expected to close next quarter.
ATENTION‼ New - CVE-2012-6340
📖 Read
via "National Vulnerability Database".
An Authentication vulnerability exists in NETGEAR WGR614 v7 and v9 due to a hardcoded credential used for serial programming, a related issue to CVE-2006-1002.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-6309
📖 Read
via "National Vulnerability Database".
A vulnerability exists in Arctic Torrent 1.4 via unspecified vectors in .torrent file handling, which could let a malicious user cause a Denial of Service.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-6307
📖 Read
via "National Vulnerability Database".
A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a malicious user execute arbitrary code📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-6306
📖 Read
via "National Vulnerability Database".
A vulnerability exists in HCView (aka Hardcoreview) 1.4 due to a write access violation with a GIF file.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-6297
📖 Read
via "National Vulnerability Database".
Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-characters, which could let a remote malicious user cause a Denial of Service.📖 Read
via "National Vulnerability Database".
🕴 Phishing Personified 🕴
📖 Read
via "Dark Reading: ".
What makes these scams so completely obvious in the physical form?📖 Read
via "Dark Reading: ".
Dark Reading
Phishing Personified
What makes these scams so completely obvious in the physical form?
🕴 90% of CISOs Would Cut Pay for Better Work-Life Balance 🕴
📖 Read
via "Dark Reading: ".
Businesses receive $30,000 of 'free' CISO time as security leaders report job-related stress taking a toll on their health and relationships.📖 Read
via "Dark Reading: ".
Darkreading
90% of CISOs Would Cut Pay for Better Work-Life Balance
Businesses receive $30,000 of 'free' CISO time as security leaders report job-related stress taking a toll on their health and relationships.