⚠ Data about inmates and jail staff spilled by leaky prison app ⚠
📖 Read
via "Naked Security".
A web-mapping project came across detainees' prescriptions and other PII that could be used by identity thieves to victimize prisoners.📖 Read
via "Naked Security".
Naked Security
Data about inmates and jail staff spilled by leaky prison app
A web-mapping project came across detainees’ prescriptions and other PII that could be used by identity thieves to victimize prisoners.
🔐 Cloud computing security: These two Microsoft tools can help you battle shadow IT 🔐
📖 Read
via "Security on TechRepublic".
Finding what cloud services employees are using is only half the battle: integrating Microsoft Cloud App Security and Defender Advanced Threat Protection means you can track, block or audit cloud app usage.📖 Read
via "Security on TechRepublic".
⚠ US charges four Chinese military members with Equifax hack ⚠
📖 Read
via "Naked Security".
The indictment suggests the hack was part of a series of major data thefts organized by Chinese military and intelligence agencies.📖 Read
via "Naked Security".
Naked Security
US charges four Chinese military members with Equifax hack
The indictment suggests the hack was part of a series of major data thefts organized by Chinese military and intelligence agencies.
❌ FBI: $3.5B Lost in 2019 to Known Cyberscams, Ransomware ❌
📖 Read
via "Threatpost".
Cybercriminals double down on successful internet scams, with a focus on phishing, BEC and other defrauding schemes that have proven to work.📖 Read
via "Threatpost".
Threat Post
FBI: $3.5B Lost in 2019 to Known Cyberscams, Ransomware
Cybercriminals double down on successful internet scams, with a focus on phishing, BEC and other defrauding schemes that have proven to work.
❌ Katie Moussouris: The Bug Bounty Conflict of Interest ❌
📖 Read
via "Threatpost".
Kate Moussouris sounds off on the challenges behind creating successful bug bounty programs.📖 Read
via "Threatpost".
Threat Post
Katie Moussouris: The Bug Bounty Conflict of Interest
Katie Moussouris sounds off on the challenges behind creating bug bounty programs that actually work.
🕴 5 Common Errors That Allow Attackers to Go Undetected 🕴
📖 Read
via "Dark Reading: ".
Make these mistakes and invaders might linger in your systems for years.📖 Read
via "Dark Reading: ".
Darkreading
5 Common Errors That Allow Attackers to Go Undetected
Make these mistakes and invaders might linger in your systems for years.
🕴 Chaos May Be the Key to Quantum-Proof Encryption 🕴
📖 Read
via "Dark Reading: ".
The implications of chaos form the basis of a new approach to encryption that promises quantum-proof perfect secrecy.📖 Read
via "Dark Reading: ".
Dark Reading
Chaos May Be the Key to Quantum-Proof Encryption
The implications of chaos form the basis of a new approach to encryption that promises quantum-proof perfect secrecy.
ATENTION‼ New - CVE-2012-0810
📖 Read
via "National Vulnerability Database".
The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corruption and panic) via a crafted application that triggers certain lock contention.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2009-5140
📖 Read
via "National Vulnerability Database".
The SIP implementation on the Linksys SPA2102 phone adapter provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2009-5139
📖 Read
via "National Vulnerability Database".
The SIP implementation on the Gizmo5 software phone provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.📖 Read
via "National Vulnerability Database".
⚠ Mozilla issues final warning to websites using TLS 1.0 ⚠
📖 Read
via "Naked Security".
From March, the Firefox, Chrome, Safari and Edge browsers will show warnings when users visit websites that only support TLS versions 1.0 or 1.1.📖 Read
via "Naked Security".
Naked Security
Mozilla issues final warning to websites using TLS 1.0
From March, the Firefox, Chrome, Safari and Edge browsers will show warnings when users visit websites that only support TLS versions 1.0 or 1.1.
🕴 Chaos & Order: The Keys to Quantum-Proof Encryption 🕴
📖 Read
via "Dark Reading: ".
The implications of chaos form the basis of a new approach to encryption that promises quantum-proof perfect secrecy. But first, your current crypto needs some tidying up.📖 Read
via "Dark Reading: ".
Dark Reading
Chaos & Order: The Keys to Quantum-Proof Encryption
The implications of chaos form the basis of a new approach to encryption that promises quantum-proof perfect secrecy. But first, your current crypto needs some tidying up.
🔐 Data breaches up 17% in 2019 over previous year 🔐
📖 Read
via "Security on TechRepublic".
The Identity Theft Recource Center warns that businesses of all sizes should be vigilant about data security.📖 Read
via "Security on TechRepublic".
TechRepublic
Data breaches up 17% in 2019 over previous year
The Identity Theft Recource Center warns that businesses of all sizes should be vigilant about data security.
🕴 What Are Some Basic Ways to Protect My Global Supply Chain? 🕴
📖 Read
via "Dark Reading: ".
Assessing supply chains is one of the more challenging third-party risk management endeavors organizations can take on.📖 Read
via "Dark Reading: ".
Dark Reading
What Are Some Basic Ways to Protect My Global Supply Chain?
Assessing supply chains is one of the more challenging third-party risk management endeavors organizations can take on.
🕴 5G Adoption Should Change How Organizations Approach Security 🕴
📖 Read
via "Dark Reading: ".
With 5G adoption, businesses will be able to power more IoT devices and perform tasks more quickly, but there will be security ramifications.📖 Read
via "Dark Reading: ".
Dark Reading
5G Adoption Should Change How Organizations Approach Security
With 5G adoption, businesses will be able to power more IoT devices and perform tasks more quickly, but there will be security ramifications.
❌ SoundCloud Tackles DoS, Account Takeover Issues ❌
📖 Read
via "Threatpost".
Among other issues, the music platform didn't limit the number of login attempts someone could make.📖 Read
via "Threatpost".
Threat Post
SoundCloud Tackles DoS, Account Takeover Issues
Among other issues, the music platform didn't limit the number of login attempts someone could make.
🛠 NTCrackPipe 2.0 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
NTCrackPipe is a basic local Windows account cracking tool.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
NTCrackPipe 2.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Stop Defending Everything 🕴
📖 Read
via "Dark Reading: ".
Instead, try prioritizing with the aid of a thorough asset inventory.📖 Read
via "Dark Reading: ".
Dark Reading
Stop Defending Everything
Instead, try prioritizing with the aid of a thorough asset inventory.
ATENTION‼ New - CVE-2012-0951
📖 Read
via "National Vulnerability Database".
A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-4661
📖 Read
via "National Vulnerability Database".
A memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP PROXY Server process (aka CSCtu52820), when configured with Cisco ISR Web Security with Cisco ScanSafe and User Authenticaiton NTLM configured.📖 Read
via "National Vulnerability Database".
❌ Mozilla Firefox 73 Browser Update Fixes High-Severity RCE Bugs ❌
📖 Read
via "Threatpost".
The release of Firefox 73 fixed high-severity memory safety bugs that could cause arbitrary code execution and missing bounds check that could enable memory corruption.📖 Read
via "Threatpost".
Threat Post
Mozilla Firefox 73 Browser Update Fixes High-Severity RCE Bugs
The release of Firefox 73 fixed high-severity memory safety bugs that could cause arbitrary code execution and missing bounds check that could enable memory corruption.