Sunday, April 18, 2021
Latest:

Home

Dedicated Editors' Pick ICS 

ENISA tool a kórházi beszerzések támogatására

Yanac

Az Európai Uniós Kiberbiztonsági Ügynökség (ENISA) új online eszközt adott ki a közbeszerzési irányelveknek való megfelelés támogatására – az egészségügyi szektorban dolgozó döntéshozók részére.
Az új eszköz segítségével az egészségügyi szervezeteknek meghatározhatják az alkalmazandó bevált gyakorlatokat annak érdekében, hogy kielégítsék a kiberbiztonsági igényeket egyes termékek vagy szolgáltatások beszerzésénél.

Frissítéssel kártékony kód – ellátási lánc támadás?

Geronimo

A “Golden Chickens” csoport munkatársakat keres

Geronimo

A Ghostwriters csoport politikai befolyása

Yanac

Mi okozta valójában a Facebook adatszivárgást?

Geronimo

News

News 

Watch NASA’s mission control track the first flight on Mars

NASA’s Ingenuity helicopter stands prepped and set for its debut flight on Mars. | NASA/JPLNASA’s Ingenuity helicopter is slated to

WordPress to automatically disable Google FLoC on websites

Monero Cryptocurrency campaign exploits ProxyLogon flaws

Discord Nitro gift codes now demanded as ransomware payments

New Trailers: Army of the Dead, The Underground Railroad, Resident Evil, and more

Awareness Corner

Follow Us

Facebook-f

Vendors' news

Episode 113: An Unprecedented FBI Operation Removes Webshells from Infected Exchange Servers

Unlocking the Power of AI

S3 Ep28.5: Hacking back – is attack an acceptable form of defence? [Podcast]

Facebook Expands Oversight Board Scope | Avast

SFR Strengthens Its Network with Cisco to Help Businesses Accelerate Digitization in France

Life with the Pengiun

Openwall Releases LKRG 0.9.0 with a Long List of Major Changes, Improvements & Bug Fixes>

Can Linux Be Used To Offer More Security In A WFH World (On And Offline)?>

Google backs effort to bring Rust to the Linux kernel>

KubeCon co-located events: Operator Day is back!

Transcribing user interviews with Amazon Transcribe

Check this out

Phone House Spain hit by Babuk ransomware, 3 million users affected.

Adversary Dossier: Ryuk Ransomware Anatomy of an Attack in 2021

Vermont Health Connect had 10 data breaches last winter

NY State Comptroller DiNapoli Releases School District Audits

Operation Overtrap – Hackers Attack Online Banking Users Via Bottle Exploit Kit & Banking Malware

CERT news

Cyber insurance guidance

RT @ail_project: In the next release of @ail_project there is a new crawler manager. It allows to have distributed crawlers on dedicated in…

RT @MISPProject: MISP 2.4.140 released with OpenID support, cross object references in extended events and many improvements. A minor secur…

Featured categories

News 

Watch NASA’s mission control track the first flight on Mars

News 

WordPress to automatically disable Google FLoC on websites

Blogs Media 

Adversary Dossier: Ryuk Ransomware Anatomy of an Attack in 2021

Blogs Media 

Phone House Spain hit by Babuk ransomware, 3 million users affected.

IOT

ICS

5G trends

BedJet 3 Climate Comfort for Beds, Cooling Fan + Heating Air (Single Temp. Zone Any Size Bed or Mattress) – CNET

Alexa, can you fix these 5 little annoyances? Quick and easy workarounds for minor issues – CNET

(2005) Will it not provoke an identity building on the ability to change roles in communication environments?

Robert Muggah, Greg Walton: ‘Smart’ Cities Are Surveilled Cities

Entity Profiles in Ockham

This Gosund table lamp is smarter than my dog and now costs just $15 – CNET

March 2021 Study Group on New Governance Models in Society 5.0

The 2021 IEEE Global Communications Conference (GLOBECOM)

The Data Market Services Accelerator call

Creation of an industrial cluster is a key area of 5G development in Moscow

Russian SVR blamed for SolarWinds supply chain compromise, cyber espionage action

Claroty chooses Yokogawa Engineering to expand its presence in S.E. Asia, Australia, N.Z.

Forescout finds NAME:WRECK vulnerabilities in four TCP/IP stacks affecting OT firmware

Claroty, Airbus CyberSecurity team to improve security of manufacturing and industrial assets

Heightened threat to businesses, critical infrastructure from hackers, says EU SOCTA report

Health-related information compromised in Belden data incident

Cring ransomware exploits vulnerability in FortiGate VPN servers

ENISA tool a kórházi beszerzések támogatására

Yanac

New ENISA online tool helps healthcare organizations secure purchase decisions

Bayshore launches industrial security appliance, OTfuse Lite

5G Supply Market Trends: Second Stakeholder Workshop on 19 May 2021

Podcast: FCC to auction off 5G bandwidth; Apple data privacy update

FCC to auction off 5G bandwidth; Apple data privacy update

Ofcom announces results of 700 MHz and 3.6-3.8 GHz auction’s principal stage

Chile completes first 5G spectrum auction in Latin America

Spectrum auction raised 778 billion INR (9 billion EUR) in India, but 700MHz spectrum was left unsold for second time

Highly coveted US auction for 3.7 GHz spectrum reached 81.1 billion USD after 2 months

Spain completes 3.5 GHz spectrum assignment for 5G in a day

The Open RAN Lexicon You Need

Open RAN May Be the Future of 5G, but Can We Keep It Secure?

Vulnerabilities

CVE-2021-3036 PAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectly (Severity: MEDIUM)

CVE-2021-3038 GlobalProtect App: Windows VPN kernel driver denial of service (DoS) (Severity: MEDIUM)

CVE-2021-3037 PAN-OS: Secrets for scheduled configuration exports are logged in system logs (Severity: LOW)

CVE-2021-3035 Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution (Severity: MEDIUM)

VMSA-2021-0004

VMSA-2021-0005

VMSA-2021-0004

VMSA-2021-0004

CVE-2021-28041 PAN-OS: Informational: Impact of the OpenSSH vulnerability CVE-2021-28041 (Severity: NONE)

Dropbox to Make Password Manager Feature Free for All Users

防守方须排查的57个安全漏洞与解决方案

Dropbox to Make Password Manager Feature Free for All Users

CVE-2021-27257 (br200_firmware, br500_firmware, d7800_firmware, ex6100v2_firmware, ex6150v2_firmware, ex6250_firmware, ex6400_firmware, ex6400v2_firmware, ex6410_firmware, ex6420_firmware, ex7300_firmware, ex7300v2_firmware, ex7320_firmware, ex7700_firmware, ex8000_firmware, lbr20_firmware,….

CVE-2020-8022 (leap, tomcat)

CVE-2020-15257 (containerd, debian_linux, fedora)

Red Hat Security Advisory 2021-0856-01

Dropbox to Make Password Manager Feature Free for All Users

CVE-2020-8022 (leap, tomcat)

CVE-2020-15257 (containerd, debian_linux, fedora)

Apple shines and buffs Mac security—Is it enough to stop today’s malware?

Apple shines and buffs Mac security—Is it enough to stop today’s malware?

Red Hat Security Advisory 2021-0856-01

Red Hat Security Advisory 2021-0873-01

Cisco Small Business RV132W and RV134W Routers Management Interface Remote Command Execution and Denial of Service Vulnerability

CVE-2021-3034 Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs (Severity: MEDIUM)

PAN-SA-2021-0002 Informational: PAN-OS: NAT slipstreaming v1.0 and v2.0 attacks (Severity: NONE)

CVE-2020-2035 PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions (Severity: LOW)

VMSA-2021-0003

VMSA-2021-0002

VMSA-2021-0002