Serious Phar Flaw Allows Arbitrary Code Execution on Drupal

Kapersky Labs - Thu, 09/05/2019 - 17:00
Drupal, Typo3 and Joomla are all impacted by the bug.
Categories: News

US minister invokes Maggie Thatcher, says she would have halted Huawei 5G rollout

The Register - Thu, 09/05/2019 - 16:05
Mike Pompeo reaches beyond grave to read Iron Lady's mind in ongoing security spat

Margaret Thatcher would not let Huawei build Britain's 5G networks, US foreign secretary Mike Pompeo claimed yesterday as British ministers suggested the rollout may be delayed for security reasons.…

Categories: News

Researchers in the Dark on Powerful LightNeuron Malware, for Years

Kapersky Labs - Thu, 09/05/2019 - 15:49
LightNeuron is the first to target Microsoft Exchange transport agents -- and is used as a hub for major Turla APT espionage efforts.
Categories: News

Enter the minds of hackers at the SANS Pen Test Hackfest Europe

The Register - Thu, 09/05/2019 - 09:42
Add new skills to your security arsenal to stay one step ahead

Promo  Organisations can no longer ignore the growing problem of cybercrime, with ransomware affecting enterprises of all sizes while state-sponsored adversaries and others attempt to obtain access to their most critical data.…

Categories: News

Eggheads confirm: Rampant Android bloatware a privacy and security hellscape

The Register - Thu, 09/05/2019 - 08:05
Bundled software not just an annoyance, it's also a risk

The apps bundled with many Android phones are presenting threats to security and privacy greater than most users think.…

Categories: News

Key to success: Tenants finally get physical keys after suing landlords for fitting Bluetooth smart-lock to front door

The Register - Wed, 08/05/2019 - 22:44
Big Apple residents weren't too appy with apartment block's high-tech security system

The owners of a Manhattan apartment block have agreed to give their tenants mechanical keys to end a court battle over a keyless smart-lock system.…

Categories: News

Airbnb Superhost Secretly Recorded Guests with Hidden Bedroom Camera

Kapersky Labs - Wed, 08/05/2019 - 21:18
The incident is only the latest in a string of disturbing horror stories of guests finding live, recording cameras hidden in their Airbnb flats.
Categories: News

Google Patches Critical Remote Code-Execution Flaws in Android

Kapersky Labs - Wed, 08/05/2019 - 18:35
The Android security update patches 15 bugs, four rated critical, 10 rated high and one ranked moderate in severity.
Categories: News

Lax Telco Security Allows Mobile Phone Hijacking and Redirects

Kapersky Labs - Wed, 08/05/2019 - 18:14
A Q&A with Kaspersky Lab researcher David Jacoby examines a gaping hole in the telco customer-service process that allows adversaries to commandeer phone calls.
Categories: News

Orange is at it again - buys SecureLink for an eye-watering €515m including debts

The Register - Wed, 08/05/2019 - 17:15
French telco's cyber arm consumes second infosec specialist of 2019

Orange has snaffled Belgium-based security services outfit SecureLink for a whopping enterprise buy price of €515m.…

Categories: News

Google Touts Android Q’s New Security Update Process and Better Privacy Controls for Apps

Kapersky Labs - Wed, 08/05/2019 - 17:03
At Google I/O, the tech giant announced it is beefing up security in phones with its latest Android Q operating system by offering direct updates and privacy controls.
Categories: News

Verizon Data Breach Report: Espionage, C-Suite and Cloud Attacks on the Rise

Kapersky Labs - Wed, 08/05/2019 - 17:01
Cloud misconfigurations, business email compromise (BEC) and intellectual property theft are all up in the Verizon DBIR 2019 from last year.
Categories: News

Top 5 Configuration Mistakes That Create Field Days for Hackers

Kapersky Labs - Wed, 08/05/2019 - 13:30
Having appropriate security configurations requires your applications, servers and databases to be hardened in accordance with best practices.
Categories: News

Cynet Provides Security Responders with Free IR Tool to Validate and Respond to Active Threats

Kapersky Labs - Wed, 08/05/2019 - 13:01
Cynet Free IR empowers its users with a solution that is accessible and easy to use, bringing crucial incident response services in-house, while saving them valuable time and resources.
Categories: News

US foreign minister Mike Pompeo to give UK a bollocking over Huawei 5G plans

The Register - Wed, 08/05/2019 - 12:05
And after that he's having tea with an archbishop. No, really

America’s foreign secretary is to deliver a telling-off to the UK over the British government’s decision to maintain the Huawei status quo for 5G networks, according to reports.…

Categories: News

Want rootkit-level access without the hassle? Enter, LightNeuron for Exchange Server

The Register - Wed, 08/05/2019 - 11:10
Microsoft software-targeting malware gets commands from code hidden in attachments

A recently uncovered malware infection uses the basic functions of Microsoft's Exchange Server to remotely monitor and control computer systems.…

Categories: News

Airbnb host thrown in the clink after guest finds hidden camera inside Wi-Fi router

The Register - Wed, 08/05/2019 - 08:02
Perv messed with the wrong woman – an IT security bod

An Airbnb "superhost" has been arrested and jailed after a guest discovered a camera hidden inside an internet router placed in the bedroom.…

Categories: News

And in this week's weird news, Feds seize dark-web news site, accuses admins of getting rich off drug cyber-souk

The Register - Wed, 08/05/2019 - 01:49
Pair cuffed in Israel

The administrators of a news website dedicated to the dark web have been arrested by the FBI and cops in Israel on suspicion of receiving commission for directing readers to a Tor-hidden souk that sold drugs and weapons.…

Categories: News

Critical Flaw in Cisco Elastic Services Controller Allows Full System Takeover

Kapersky Labs - Tue, 07/05/2019 - 21:38
Cisco has patched a critical flaw in its virtualized function automation tool, Cisco Elastic Services Controller.
Categories: News

Remember those stolen 'NSA exploits' leaked online by the Shadow Brokers? The Chinese had them a year before

The Register - Tue, 07/05/2019 - 20:39
Or so claims Symantec

Months before top-tier hacking tools, likely built by the NSA, were leaked to the public by a group calling itself the Shadow Brokers, the exploit code was apparently being used by Chinese state hackers to infiltrate systems.…

Categories: News


Subscribe to Sec Tec Limited aggregator - News