Troy Hunt

DECEMBER 23, 2023

It's that time of the year again, time to head from the heat to the cold as we jump on the big plane(s) back to Europe. The next 4 weekly updates will all be from places of varying degrees colder than home, most of them done with Scott Helme too so they'll be a little different to usual. For now, here's a pretty casual Christmas edition, see you next week from the other side 🙂 References Sponsored by: Unpatched devices keeping you up at night?

Mobile 234

Mobile Marketing 234

Penetration Testing

DECEMBER 23, 2023

OpenSSH, a critical component in secure networking, has recently faced a formidable challenge. A now-patched security vulnerability, with a CVSS score of 9.8, threatened the very core of its secure channel operations. Identified as... The post CVE-2023-51385 and CVE-2023-6004 – A Dual OpenSSH Threat appeared first on Penetration Testing.

Penetration Testing 134

Penetration Testing 134

Security Affairs

DECEMBER 23, 2023

The LockBit ransomware claims to have hacked accountancy firm Xeinadin threatens to leak the alleged stolen data. The LockBit ransomware claims responsibility for hacking the Xeinadin accountancy firm and threatens to disclose the alleged stolen data. Xeinadin has over 60,000 clients across the UK and Ireland. In 2021, a significant endorsement came from Exponent, one of the leading private equity investors in the UK, propelling the firm to become one of the top 20 accountancy firms in the count

Accountability 127

Accountability Ransomware Data breaches Hacking 127

Bleeping Computer

DECEMBER 23, 2023

A new Python project called 'Wall of Flippers' detects Bluetooth spam attacks launched by Flipper Zero and Android devices.

140

140

Advertisement

How many people would you trust with your house keys? Chances are, you have a handful of trusted friends and family members who have an emergency copy, but you definitely wouldn’t hand those out too freely. You have stuff that’s worth protecting—and the more people that have access to your belongings, the higher the odds that something will go missing.

Cybersecurity

Security Affairs

DECEMBER 23, 2023

Mobile virtual network operator Mint Mobile suffered a new data breach, threat actors had access to customers’ personal information. Mint Mobile experienced a recent data breach, exposing customers’ personal information to unauthorized access by threat actors. Mint Mobile is a mobile virtual network operator (MVNO) that offers prepaid mobile phone services.

Mobile 114

Mobile Data breaches Wireless Data collection 114

Penetration Testing

DECEMBER 23, 2023

Deepin Linux, renowned for its beauty and simplicity, is a hallmark of open-source technology. Developed by a talented Chinese team, it promises a user-friendly, secure, and stable experience. The default document reader in Deepin Linux,... The post CVE-2023-50254 – Deepin-Reader Flaw: A Shortcut to Remote Command Execution appeared first on Penetration Testing.

Penetration Testing 90

Penetration Testing Technology 90

Security Boulevard

DECEMBER 23, 2023

Full Presenter List: Sophie Stephenson, Majed Almansoori, Pardis Emami-Naeini, Rahul Chatterjee Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott ; and via the organizations YouTube channel.

IoT 62

IoT Accountability Architecture Education 62

Security Boulevard

DECEMBER 23, 2023

Having found myself roped into assisting as co-administrator a couple of Facebook groups with security/privacy issues, I thought I should, perhaps, share what little I know about defending your group against scam and spam posts and comments by tightening up group settings. Caveat: I’ve never really wanted to spend a lot of time administering Facebook […] The post Group Therapy – security and privacy in Facebook groups appeared first on Security Boulevard.

Scams 57

Scams 57

Security Boulevard

DECEMBER 23, 2023

Imagine standing at the entrance to a vault where your most valuable possessions are stored. The door doesn’t open with just one key; you need several to unlock it. That’s the essence of multi-factor authentication (MFA) in a nutshell. Instead of a single password, MFA requires multiple proofs of identity to grant access to digital … Best Practices in Multi-Factor Authentication for Enhanced Security Read More » The post Best Practices in Multi-Factor Authentication for Enhanced Security appeare

Authentication 67

Authentication Passwords 67