InfoSec / Cyber Security Newsthehackernews.com17-Year-Old Critical 'Wormable' RCE Vulnerability Impacts Windows DNS ServersAdobe Issues July 2020 Critical Security Patches for Multiple SoftwareCompTIA Certification Prep Courses – Get Lifetime Access @ 99% DiscountNew Highly-Critical SAP Bug Could Let Attackers Take Over Corporate ServersExclusive: Any Chingari App (Indian TikTok Clone) Account Can Be Hacked EasilyUnpatched Critical Flaw Disclosed in Zoom Software for Windows 7 or Earliersciencedaily.comSpintronics: Faster data processing through ultrashort electric pulsesUsing cellular networks to detect at-risk areas for spread of COVID-19No keys to the kingdom: New single sign-on algorithm provides superior privacyQuantum physics provides a way to hide ignoranceTool to protect children's online privacyAdding noise for completely secure communicationwired.comMicrosoft Warns of a 17-Year-Old ‘Wormable’ BugGoogle Moves to Secure the Cloud From ItselfHow Two-Factor Authentication Keeps Your Accounts Safe15 Billion Stolen Logins Are Circulating on the Dark WebThe 'Super Smash Bros.' Community Reckons With Sexual Misconduct AllegationsAmazon Says It Didn’t Mean to Ban Employees From Using TikTokzerodayinitiative.comThe July 2020 Security Update ReviewCVE-2020-1300: Remote Code Execution Through Microsoft Windows CAB FilesCVE-2020-7454: Killing Two Birds with One Bug in libaliasZDI-20-709: Heap Overflow in the NETGEAR Nighthawk R6700 RouterOur CVE Story: Bringing our ZDI community to the CVE communityCVE-2020-1181: SharePoint Remote Code Execution Through Web Partsbleepingcomputer.comWhatsApp is down, users reporting worldwide outageMicrosoft fixes Windows 10 issue causing reboots, LSASS crashesChrome 84 released with important security enhancementsWindows 10 2004 servicing stack update fixes privilege escalation bugMicrosoft July 2020 Patch Tuesday: 123 vulnerabilities, 18 Critical!Microsoft patches critical wormable SigRed bug in Windows DNS Serveritpro.co.ukWhat is strong customer authentication (SCA) under PSD2?What is a Trojan?What is an MSSP?How to protect your remote workforceThe top 12 password-cracking techniques used by hackersWhat is a botnet?reddit.com/r/securityAnnouncement: r/security is now closed down and will be re-launched soon. Please use r/cybersecurity for all cybersecurity topics.Detailed audit of Voatz' voting app confirms security flawsSecure Rust GuidelinesSecurity Love Languages: 8 Tips to Win Friends and Influence People in SecurityOngoing DDoS attacks against ISPs?The Espionage Act Reform Bill Addresses Key Press Concernsreddit.com/r/netsecThe /r/netsec Monthly Discussion Thread - July 2020/r/netsec's Q3 2020 Information Security Hiring ThreadMicrosoft security advisory - Windows DNS Server Remote Code Execution Vulnerability (CVE 2020-1350)SIGRed - Resolving Your Way into Domain Admin: Exploiting a 17 Year-old Bug in Windows DNS Servers - Check Point ResearchTrustwave write-up on the GoldenSpy and GoldenHelper malware in state-mandated VAT software for companies operating in ChinaSecure Code Review Best Practicesreddit.com/r/websecBuilding my website to break it...ExpensifyDVWA File Upload Medium Level: Is there any available list for "Content-Type:"?ModSecurity Score-Based Rule Set (SBRS): Higher success rate without false-positiveSQL Injection: How to use tick/quote when it's not possible?Web Cache Deception in WhiteHat Security’s Top 10 Application Vulnerabilities of 2019reddit.com/r/InfoSecNewsCritical SAP Recon vulnerability exposes thousands of system to full take overBreach database company DataViper allegedly hacked with billions of records offered for saleNightLion hacker is selling details of 142 million MGM Resorts hotel guestsEnigma code-breaking machine rebuilt at Cambridge3.4 Million user records from LiveAuctioneers hack available for saleNew Mirai variant includes exploit for a flaw in Comtrend Routerskrebsonsecurity.com‘Wormable’ Flaw Leads July Microsoft PatchesBreached Data Indexer ‘Data Viper’ HackedE-Verify’s “SSN Lock” is Nothing of the SortRansomware Gangs Don’t Need PR HelpCOVID-19 ‘Breach Bubble’ Waiting to Pop?Russian Cybercrime Boss Burkov Gets 9 Yearsdarkreading.comDevSecOps Requires a Different Approach to SecurityMicrosoft Patches Wormable RCE Flaw in Windows DNS Servers'Make Your Bed' and Other Life Lessons for SecurityGoogle Cloud Unveils 'Confidential VMs' to Protect Data in UseCritical Vulnerability Hits SAP Enterprise ApplicationsNew Mirai Variant Surfaces with Exploits for 9 Vulnerabilities Productsthreatpost.comMicrosoft Tackles 123 Fixes for July Patch TuesdayCritical DNS Bug Opens Windows Servers to Infrastructure HijackingAdobe Discloses Critical Code-Execution Bugs in July UpdateDMARC Adoption Spikes, Higher Ed Remains BehindMost Companies Are Ignoring Your Most Vulnerable Endpoint…and It’s Not the LaptopLeaked Details of 142 Million MGM Hotel Guests Found for Sale on Dark Webreddit.com/r/pwnedHeard about this website where you can check if your password is leaked. This is what it said for my mail. Am i screwed? What does it mean?Ransomware attack on insurance MSP Xchanging affects clientsBusiness giant Xerox allegedly suffers Maze Ransomware attackLG Electronics allegedly hit by Maze ransomware attackNintendo now says that the accounts of 300,000 Switch users have been hackedwelivesecurity.comZoom patches zero‑day flaw in Windows clientWeek in security with Tony AnscombePopular home routers plagued by critical security flawsBillions of stolen passwords for sale on the dark webMore evil: A deep look at Evilnum and its toolsetAttackers target critical flaw in popular networking gearscmagazine.comMicrosoft fixes wormable Windows DNS Service flawPatch Tuesday: Adobe eliminates four critical bugsIs TikTok out of time? Experts mull implications of banU.S. top in significant cyberattacks on CSIS listDMARC embraced by government, private industry lagshelpnetsecurity.comNew partners to integrate LoginID FIDO-as-a-ServiceAlvaro Ladoux joins Group-IB as new Business Development Manager for Spain and LATAMHenri Richard becomes board advisor at ExceleroJerrod Stoller joins Digital Envoy as new presidentAnitian appoints Rakesh Narasimhan as new CEOtrendmicro.comAsk Me Anything – Celebrating The Fifth Anniversary Of My Monthly Threat WebinarThis Week in Security News: 15 Billion Credentials Currently Up for Grabs on Hacker Forums and New Mirai Variant Expands ArsenalCleaner One Pro Speeds Up Your Mac – Part 1Cloud Security Is Simple, Absolutely Simple.Automatic Visibility And Immediate Security with Trend Micro + AWS Control Towersecurityweek.comResearchers Find More Malware Delivered via Chinese Tax SoftwareAdobe Patches Critical Vulnerabilities in Media Encoder, Download ManagerUK to Exclude Huawei From Role in High-Speed Phone NetworkBlockchain Security Startup Valid Network Raises $8 Million in Seed RoundCloud Application Security Firm Traceable Emerges From Stealth Modesiliconrepublic.comHow did Covid-19 affect Cork’s new security operations centre?Welltel acquires Kildare-based cybersecurity firm Novi for €3mEstonian identity verification start-up Veriff raises $15.5mSonicWall appoints Tristan Bateup as Ireland country manager6 cybersecurity start-ups shaking up the industrynakedsecurity.sophos.comRATicate malware gang goes commercialDigicert revokes a raft of web security certificatesMonday review – the hot stories of the weekMozilla turns off “Firefox Send” following malware abuse reportsKinda sorta weakened version of EARN IT Act creeps closercsoonline.comGoogle Cloud steps up security and compliance for applications, governmentCritical flaw allows hackers to breach SAP systems with ease5 best practices to secure single sign-on systemsBrandPost: Virtual Security Analysts – Using AI to Bridge the Cybersecurity Skills GapHow to protect algorithms as intellectual propertyThe CSO guide to top security conferences, 2020kitploit.comMaskprocessor - High-Performance Word Generator With A Per-Position Configureable CharsetX64Dbg - An Open-Source X64/X32 Debugger For WindowsDroneSploit - Drone Pentesting Framework ConsolePadding-Oracle-Attacker - CLI Tool And Library To Execute Padding Oracle Attacks EasilyDebotnet - A Tiny Portable Tool For Controlling Windows 10's Many Privacy-Related Settings And Keep Your Personal Data Privatesecurityboulevard.comMicrosoft Sued for LinkedIn Clipboard Snooping ScareChoose the Right Framework to Better Navigate the Convergence of Data Privacy & CybersecurityDate Online Safely and Securely | AvastXKCD ‘Cursed Chair’AppSecCali 2020 – Julien Sobrier’s ‘Kubernetes Security From The Trenches’grahamcluley.comMan who lived luxury lifestyle after hacking LinkedIn and Dropbox is found guiltyMillions of LiveAuctioneers passwords offered for sale following data breachPrioritize alerts and jump-start your investigations with Recorded Future’s free browser extension. Sign up now.LiveAuctioneers security breach puts users at riskGoogle’s ad ban won’t stop stalkerware apps from promoting themselves