Cyber Security Newsfeeds from around the world
“A rash of supply chain attacks hitting open source software over the past year shows few signs of abating, following the discovery this week of two separate backdoors slipped into a dozen libraries downloaded by hundreds of thousands of server adminis…
Continue ReadingAug 24, 2019 9:01 am EDT | Medium Severity IBM Db2 Mirror for i configurations may be subject to this security vulnerability. A PTF for IBM i 7.4 and remediation steps are available. CVE(s): CVE-2019-4536 Affected product(s) and affected version(s):IBM…
Continue ReadingWhat is an Indicator of Attack (IOA) IoA’s is some events that could reveal an active attack before indicators of compromise become visible. Use of IoA’s provides a way to shift from reactive cleanup/recovery to a proactive mode, where attackers are di…
Continue ReadingIsrael, like other big defence exporters, closely guards details of its weapons sales and its export rules are not widely known, but the defence ministry confirmed the change had gone into force about a year ago in response to Reuters’ questions. Indus…
Continue ReadingThe broad movement of ‘connected devices’ represents a growing cybersecurity threat that puts patient data, medical information, and potentially patient well-being at risk.
Healthcare can’t wait for device makers to prioritize security.
Internet-conn…
Continue ReadingThis cheatsheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples. It is not a cheatsheet for Enumeration using Linux Commands. Privilege escalation is all about proper enumeration….
Continue Reading23 August 2019. Plus, poker site dealt a hand of malware, ransomware hits 22 Texas towns, and Apple mistakenly unpatches a flaw Cybersecurity researchers discovered an unprotected and unencrypted database containing over 161 million records belonging t…
Continue ReadingResearchers are warning of an ongoing campaign exploiting vulnerabilities in a slew of WordPress plugins. The campaign is redirecting traffic from victims’ websites to a number of potentially harmful locations. Impacted by the campaign is a plugin call…
Continue ReadingDelaware, USA – August 23, 2019 – DarkHotel group (aka APT-C-06) modified Asruex backdoor, adding the capability of infecting PDFs, Word documents, and executables to spread infection within a targeted organization. The group is known for its stealth a…
Continue ReadingSoftware updates released by Kubernetes this week address HTTP/2 implementation vulnerabilities that were disclosed earlier this month.
HTTP/2 is the second major revision of the HTTP Internet protocol, meant to improve performance and stability. Ear…
Continue Reading