The Uber Data Breach Conviction Shows Security Execs What Not to Do
Former Uber security chief Joe Sullivan’s conviction is a rare criminal consequence for an executive’s handling of a hack.
Category: Security alerts
Mozilla Releases Firefox 72: High-Severity Bugs Patched, Fingerpinting Nixed
Mozilla tackles high-severity bugs in its latest Firefox 72 and Firefox ESR 68.4 releases at the same time rolls a major privacy feature .
Critical Firefox Bugs Allow Arbitrary Code-Execution
Multiple critical memory safety bugs in Firefox 69 and Firefox ESR 68.1 in particular affect medium and large government entities and enterprises.
The Washington Post’s New Columnist Consults for Spyware Firm That Helps Saudi Arabia Surveil Journalists
Just over a year ago, Washington Post columnist Jamal Khashoggi walked into a Saudi Arabian consulate in Turkey. He never walked out. He was murdered and dismembered; American intelligence agencies believe the Saudi royal family...
American intelligence follows British lead in warning of serious VPN vulnerabilities
Now if only they’d accept the Queen back again… The US National Security Agency (NSA) is warning admins to patch a set of months-old security bugs that have recently come under active attack.…
Human Rights Activist Allegedly Targeted With NSO Malware Says His Life Is ‘Hellish’
Hackers likely working for a government targeted two Moroccan human rights activists with malware made by the controversial Israeli surveillance vendor NSO Group, according to a new report by Amnesty International. In the...
Gamers Warned of High-Severity Intel, Nvidia Flaws
The Intel NUC and Nvidia Shield both are vulnerable to high-severity flaws, Intel and Nvidia warned in dual advisories.
As an immigrant and CEO, here’s what I’ve learned about building an inclusive culture
Many companies approach diversity and inclusion from the perspective of improving gender and race ratios, but immigrants are often overlooked in this discussion. That’s a shame because immigrants have unique backgrounds and...
SN 735: Makes Ya WannaCry
Ransomware hits schools, hospitals, and hearing aid manufacturers Sodinokibi: the latest advances in Ransomware-as-a-Service Win7 Extended Security Updates are extended A new Nasty 0-Day RCE in vBulletin There’s a new...
What’s the last piece of software you’d expect to spy on you? Maybe your enterprise security suite? Bad news
Report finds enterprise software collecting and shipping out sensitive customer information Enterprise security, analytics, and hardware management tools – the very tools used to keep data safe – are collecting and...
Cisco Routers Still Plagued With Security Flaws
Problem: Models affected are the RV320 and RV325. The previous update failed to work. Cause: Hackers can run administrative commands without a password. Also allows hackers to retrieve device configuration details without a...
Apache Web Server Bug Puts Shared Web Hosts At Risk of Being Hacked
Problem: Bug affects Apache HTTP Server versions 2.4.17 to 2.4.38. Cause: Server privilege escalation from modules’ scripts, mod_auth_digest access control bypass and mod_ssl access control bypass are the most critical....
