Cyber Security Newsfeeds from around the world
Node.js cordova-plugin-ionic-webview: directory traversal Synthesis of the vulnerability An attacker can traverse directories of Node.js cordova-plugin-ionic-webview, in order to read a file outside the service root path. Vulnerable products:
Severity…
Continue ReadingAt this point, there are probably thousands of Linux distributions out there, operating systems developed by many different groups of people, all with a Linux kernel. A number of those distros have been specifically designed for cybersecurity needs and…
Continue Reading#################################################################### # Exploit Title : ZRECore 1.3.1 Database Configuration Disclosure # Author [ Discovered By ] : KingSkrupellos # Team : Cyberizm Digital Security Army # Date : 16/02/2019 # Vendor Home…
Continue Readingvia UK security and counter-terrorism | The Guardian Crisis talks to be held after legal aid is cut and key British intelligence files go missingBereaved families and lawyers are threatening to boycott the long-awaited inquests into the 1974 IRA Birmin…
Continue ReadingGnuPG Dirmngr: Cross Site Request Forgery Synthesis of the vulnerability An attacker can trigger a Cross Site Request Forgery of GnuPG Dirmngr, in order to force the victim to perform operations. Vulnerable products:
Severity of this weakness: 2/4. Co…
Continue Readingvia UK security and counter-terrorism | The Guardian Whatever the risk this young Isis supporter may pose, she is Britain’s responsibility and we cannot afford to shirk itExploited victim or unrepentant villain? It’s impossible to determine the truth a…
Continue ReadingIf an organisation is connected to the internet and holds any type of data, it’s almost inevitable that it’s going to end up in the sights of hackers. Pretty much any data from personal information and bank details to email addresses and passwords can …
Continue ReadingCyber warriors in the United States are preparing for a digital Cold War, deterring cyberattacks against specific critical infrastructure—when what is most urgently needed is a counterinsurgency (an “e-surgency”) strategy to beat back the everyday cybe…
Continue ReadingSecurity updates are supposed to protect you from software flaws that can put you in danger. We get these update notices periodically and we are always advised to install (legitimate) patches as soon as we can. This practice can preempt software attack…
Continue Readingvia UK security and counter-terrorism | The Guardian Counter-radicalisation expert criticises Sajid Javid’s reaction, saying it feeds Isis narrativeThe home secretary’s response to teenage Islamic State bride Shamima Begum will guarantee new recruits t…
Continue Reading