🔐 Insider data breach survey finds directors most likely to break company policy 🔐
📖 Read
via "Security on TechRepublic".
Report suggests IT leaders think breaches are inevitable and don't have adequate risk management in place.📖 Read
via "Security on TechRepublic".
TechRepublic
Insider data breach survey finds directors most likely to break company policy
Report suggests IT leaders think breaches are inevitable and don't have adequate risk management in place.
ATENTION‼ New - CVE-2014-3622
📖 Read
via "National Vulnerability Database".
Use-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6.x before 5.6.1 might allow remote attackers to execute arbitrary code by leveraging a third-party filter extension that accesses a certain ksep value.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2014-2727
📖 Read
via "National Vulnerability Database".
The STARTTLS implementation in MailMarshal before 7.2 allows plaintext command injection.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2014-2228
📖 Read
via "National Vulnerability Database".
The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages.📖 Read
via "National Vulnerability Database".
❌ Hamas Ensnares Israeli Soldiers with Pretty ‘Ladies’ ❌
📖 Read
via "Threatpost".
The third catfish attempt in three years from the Palestinian militant group adds a few technical advances to the mix.📖 Read
via "Threatpost".
Threat Post
Hamas Ensnares Israeli Soldiers with Pretty ‘Ladies’
The third catfish attempt in three years from the Palestinian militant group adds a few technical advances to the mix.
❌ SMS Attack Spreads Emotet, Steals Bank Credentials ❌
📖 Read
via "Threatpost".
A new Emotet campaign is spread via SMS messages pretending to be from banks and may have ties to the TrickBot trojan.📖 Read
via "Threatpost".
Threat Post
SMS Attack Spreads Emotet, Steals Bank Credentials
A new Emotet campaign is spread via SMS messages pretending to be from banks and may have ties to the TrickBot trojan.
🕴 DHS's CISA Warns of New Critical Infrastructure Ransomware Attack 🕴
📖 Read
via "Dark Reading: ".
An attack on a natural gas compression facility sent the operations offline for two days.📖 Read
via "Dark Reading: ".
Darkreading
DHS's CISA Warns of New Critical Infrastructure Ransomware Attack
An attack on a natural gas compression facility sent the operations offline for two days.
🔐 Security holes in 2G and 3G networks will pose a risk for next several years 🔐
📖 Read
via "Security on TechRepublic".
Despite the growth of 5G and 4G, older network technologies beset with certain security flaws will be around for many more years, says enterprise security provider Positive Technologies.📖 Read
via "Security on TechRepublic".
TechRepublic
Security holes in 2G and 3G networks will pose a risk for next several years
Despite the growth of 5G and 4G, older network technologies beset with certain security flaws will be around for many more years, says enterprise security provider Positive Technologies.
ATENTION‼ New - CVE-2013-5581
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-6685
📖 Read
via "National Vulnerability Database".
Nokogiri before 1.5.4 is vulnerable to XXE attacks📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-6614
📖 Read
via "National Vulnerability Database".
D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-1932
📖 Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the setting[admin_email] parameter to admin/setting.📖 Read
via "National Vulnerability Database".
🕴 44% of Security Threats Start in the Cloud 🕴
📖 Read
via "Dark Reading: ".
Amazon Web Services is a top source of cyberattacks, responsible for 94% of all Web attacks originating in the public cloud.📖 Read
via "Dark Reading: ".
Darkreading
44% of Security Threats Start in the Cloud
Amazon Web Services is a top source of cyberattacks, responsible for 94% of all Web attacks originating in the public cloud.
🕴 Zero-Factor Authentication: Owning Our Data 🕴
📖 Read
via "Dark Reading: ".
Are you asking the right questions to determine how well your vendors will protect your data? Probably not.📖 Read
via "Dark Reading: ".
Darkreading
Zero-Factor Authentication: Owning Our Data
Are you asking the right questions to determine how well your vendors will protect your data? Probably not.
ATENTION‼ New - CVE-2012-0055
📖 Read
via "National Vulnerability Database".
OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions.📖 Read
via "National Vulnerability Database".
🔏 U.S. Warns of Ransomware Attacks Targeting Pipeline Ops 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Following an attack on a gas compression facility, CISA is urging organizations to take steps to safeguard their systems.📖 Read
via "Subscriber Blog RSS Feed ".
Fortra's Digital Guardian
U.S. Warns of Ransomware Attacks Targeting Pipeline Ops
Following an attack on a gas compression facility, CISA is urging organizations to take steps to safeguard their systems.
❌ BlueKeep Flaw Plagues Outdated Connected Medical Devices ❌
📖 Read
via "Threatpost".
More than 55 percent of medical imaging devices - including MRIs, XRays and ultrasound machines - are powered by outdated Windows versions, researchers warn.📖 Read
via "Threatpost".
Threat Post
BlueKeep Flaw Plagues Outdated Connected Medical Devices
More than 55 percent of medical imaging devices - including MRIs, XRays and ultrasound machines - are powered by outdated Windows versions, researchers warn.
❌ U.S. Pipeline Disrupted by Ransomware Attack ❌
📖 Read
via "Threatpost".
The attack took a gas compression facility offline for two days, disrupting the supply chain.📖 Read
via "Threatpost".
Threat Post
U.S. Pipeline Disrupted by Ransomware Attack
The attack took a gas compression facility offline for two days, disrupting the supply chain.
🕴 User Have Risky Security Habits, but Security Pros Aren't Much Better 🕴
📖 Read
via "Dark Reading: ".
Researchers spot gaps in users' and IT practitioners' security habits, and between security tools and user preferences.📖 Read
via "Dark Reading: ".
Dark Reading
User Have Risky Security Habits, but Security Pros Aren't Much Better
Researchers spot gaps in users' and IT practitioners' security habits, and between security tools and user preferences.
🕴 Users Have Risky Security Habits, but Security Pros Aren't Much Better 🕴
📖 Read
via "Dark Reading: ".
Researchers spot gaps in users' and IT practitioners' security habits, and between security tools and user preferences.📖 Read
via "Dark Reading: ".
Dark Reading
Users Have Risky Security Habits, but Security Pros Aren't Much Better
Researchers spot gaps in users' and IT practitioners' security habits, and between security tools and user preferences.
🕴 Researchers Fool Smart Car Camera with a 2-Inch Piece of Electrical Tape 🕴
📖 Read
via "Dark Reading: ".
McAfee researchers say they were able to get a Tesla to autonomously accelerate by tricking its camera platform into misreading a speed-limit sign.📖 Read
via "Dark Reading: ".
Darkreading
Researchers Fool Smart Car Camera with a 2-Inch Piece of Electrical Tape
McAfee researchers say they were able to get a Tesla to autonomously accelerate by tricking its camera platform into misreading a speed-limit sign.