Laura Ritchie
Anyone who uses ZOOM - huge vulnerability. Read whole article.
https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5
I was compromised - IT WAS RUNNING A WEB-SERVER ON MY MAC.
Read whole article - just uninstalling doesn't fix it.
#security
infosec-handbook.eu
Notes on privacy and data collection of Matrix.org:
https://gist.github.com/maxidorius/5736fd09c9194b7a6dc03b6b8d7220d0
"matrix.org and vector.im receive a lot of private, personal and identifiable data on a regular basis, or metadata that can be used to precisely identify and/or track users/server, their social graph, usage pattern and potential location. This is possible both by the default configuration values in synapse/Riot […]"
Yes, I Know IT ! 🎓
Another excellent cheatsheet by Jeremy Stretch:
http://packetlife.net/media/library/6/IPsec.pdf
Follow him on Twitter (https://twitter.com/packetlife/) and check his website for more (http://packetlife.net/)
#IPSec #IP #Network #Security #Layer #Cheatsheet
fusion
Update of online tracking on top 50 site home pages for France, Germany and United Kingdom
With country tracking profile comparison
Nextcloud 📱☁️💻
In a world with rising ransomware costs, Nextcloud saves your business millions https://nextcloud.com/blog/amidst-rising-ransomware-costs-another-us-city-pays-hundreds-of-thousands-to-recover-data/ #nextcloud #business #security #blog
Greg Slepak 🐢
DoS attack against #GPG / #OpenPGP. Will likely only get worse.
RT https://twitter.com/lobsters/status/1145036770691563520
SKS Keyserver Network Under Attack
https://lobste.rs/s/lyjs3a #crypto #security
infosec-handbook.eu
GnuPG — "SKS Keyserver Network Under Attack":
https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f
"If you fetch a poisoned certificate from the keyserver network, you will break your GnuPG installation."
"High-risk users should stop using the keyserver network immediately."
yoditar
The email can be safe, private and friendly with the environment like Tutanota.
I invite you to read my last post in Medium titled "Tutanota: the green email".
https://medium.com/@yoditar/tutanota-the-green-email-1310cedb5e9d
lostinlight
@guidoV4 Wow, sounds like a mess. @fedilab Have there been reports of such issues? cc @hypolite #security
ranx
#security #flaw in #dell #supportassist - unistalled in april, downloaded the new version but never installed... it's probably a good thing to never install it again https://thehackernews.com/2019/06/dells-supportassist-hacking.html
Dr. Roy Schestowitz (罗伊)
Dr. Roy Schestowitz (罗伊)
Hypolite Petovan
infosec-handbook.eu
Kali Linux 2019.2, and Kali NetHunter 2019.2 available:
https://www.kali.org/news/kali-linux-2019-2-release/
– based on Linux kernel 4.19.28
– packages updated
– bug fixes
#pentest #kali #linux #kalilinux #infosec #cybersecurity #security #kalinethunter
Hypolite Petovan
♲ @ashu_barot@twitter.com: When a company doesn't have a responsible disclosure Email/page....I have to choose an unexpected communication channel... :/
Please use security.txt @securitytxt #BugHunting #ResponsibleDisclosure
Hypolite Petovan
Nextcloud 📱☁️💻
Again and again it is shown - putting your data at US cloud services is a #compliance and #security risk.
https://nextcloud.com/blog/eu-and-us-government-agencies-converge-on-conclusion-us-cloud-platforms-not-compliant/
# GDPR #DSGVO
Karl Voit ✅
RT @sehnaoui@twitter.com
This is why you need an RFID shielded wallet. Be careful !!
#InfoSec #Security
infosec-handbook.eu
Did you know?
You can directly search for hashtagged Mastodon/Fediverse posts.
For instance, the following link shows all of our posts about the Tor Browser:
https://mastodon.at/@infosechandbook/tagged/torbrowser
The following link shows all of our posts about vulnerabilities:
https://mastodon.at/@infosechandbook/tagged/vulnerability
Just replace the last part of the link ([hashtag]):
https://mastodon.at/@infosechandbook/tagged/[hashtag]
#infosechandbook #infosec #cybersecurity #security #blog #itsecurity #hashtag #mastodon #tip
infosec-handbook.eu
2+ million IoT devices vulnerable to man-in-the-middle attacks, allowing attackers to steal passwords:
– the website contains a list, so you can check if your devices are vulnerable
– CVE-2019-11219, CVE-2019-11220
– mitigation: dispose your vulnerable devices, or block OUTBOUND traffic to 32100/udp
#iot #vulnerability #cve201911219 cve201911220 #infosec #mitm #cybersecurity #security
Jonkman Microblog is a social network, courtesy of SOBAC Microcomputer Services. It runs on GNU social, version 1.2.0-beta5, available under the GNU Affero General Public License.
All Jonkman Microblog content and data are available under the Creative Commons Attribution 3.0 license.