home thehackernews.com Breach at Bulgaria's Tax Agency Exposed Data of Over 70% CitizensEvilGnome: A New Backdoor Implant Spies On Linux Desktop UsersNew Attack Lets Android Apps Capture Loudspeaker Data Without Any PermissionZoom RCE Flaw Also Affects Its Rebranded Versions RingCentral and ZhumuEngage Your Management with the Definitive 'Security for Management' Presentation TemplateHackers Can Manipulate Media Files You Receive Via WhatsApp and Telegram sciencedaily.com Review evaluates how AI could boost the success of clinical trialsResearchers build transistor-like gate for quantum information processing -- with quditsPersonalized medicine software vulnerability uncoveredBuilding a bridge to the quantum worldDiscovery of a 'holy grail' with the invention of universal computer memoryHackproofing smart meters wired.com Think FaceApp Is Scary? Wait Till You Hear About FacebookWhy Microsoft’s BlueKeep Bug Hasn’t Wreaked Havoc—YetHackers Made an App That Kills to Prove a PointHow To Clear Out Your Zombie Apps and Online AccountsPalantir Manual Shows How Law Enforcement Tracks FamiliesAn Amazon Phishing Scam Hits Just in Time For Prime Day securityfocus.com Vuln: Apache Struts CVE-2016-1181 Remote Code Execution VulnerabilityVuln: Apache Tomcat CVE-2018-1305 Security Bypass VulnerabilityVuln: Apache HTTP Server CVE-2019-0190 Denial of Service VulnerabilityVuln: Spring Security and Spring Framework CVE-2018-1258 Authorization Bypass VulnerabilityBugtraq: [SECURITY] [DSA 4269-1] postgresql-9.6 security updateBugtraq: [SECURITY] [DSA 4268-1] openjdk-8 security update bleepingcomputer.com Real-Time Location of Millions Exposed by Mobile Loan AppsStalkerware Apps on Google Play Installed Over 130,000 TimesUS Govt Rolls Out New DNS Security Measures for .gov DomainsNew EvilGnome Backdoor Spies on Linux Users, Steals Their FilesGroup Behind Windows 10 App Malvertising Pushed 100M Ads in 2019Trojan-Riddled WinRAR, Winbox, IDM Spreads StrongPity Spyware itpro.co.uk Why the telecoms industry is particularly vulnerable to BlueKeepNHS systems still reliant on Windows XPTurning the page on password security as its creator, Fernando Corbato, dies at 93NCSC hails successful proprietary anti-phishing techniqueNCSC issues guidance for combatting global DNS hijacking campaignUS may reopen trade with Huawei 'within weeks' reddit.com/r/security Researchers are developing firmware hardening technologies for uefi that will restrict what an attacker can do, even with code execution inside firmware.Accidentally Uploaded Pic With OAuth DomainLook at this text I have received twice. Should I be scared? I blocked it but how does a random email like that have my number?Identifying tokens and random addresses, meant to create anonymity, do not change in sync on some devices — opening an attack vector.Malware framework creates one billion fake Google Adsense ad impressions in only a few monthsRandom phone number called, help! reddit.com/r/netsec Attacking SSL VPN - Part 1: PreAuth RCE on Palo Alto GlobalProtectThat XMR is MINE! [Blog Post]Show /r/netsec: Dlint, a static analysis tool for helping ensure Python code is secureAutomating local DTD discovery for XXE exploitation[libreoffice] CVE-2019-9848 LibreLogo arbitrary script executionWindows Kernel Debugging & Exploitation Part1 – Setting up the lab - VoidSec reddit.com/r/websec Nemesida WAF Free now supports Nginx Stable, Mainline and Plus versionContent-type charsetWordPress Vulnerability TableWeb application security testing methodology / checklist / mindmapHow I was able to access AWS credentials by first finding an unusual redirection then getting kind of Remote File Inclusion (RFI), escalating it to Server Side Request Forgery (SSRF) and finally getting hold of AWS EC2 Credentials. reddit.com/r/InfoSecNews Anti-Debugging Techniques from a Complex Visual Basic PackerMysterious hackers steal data of over 70% of BulgariansiOS URL Scheme expose users to App-in-the-Middle attackTurla APT group adds Topinambour Trojan to its arsenalDoppelPaymer, a fork of BitPaymer Ransomware, appeared in the threat landscapeFlaw in Ad Inserter WordPress plugin allows remote attackers to execute code krebsonsecurity.com Party Like a Russian, Carder’s EditionMeet the World’s Biggest ‘Bulletproof’ HosterIs ‘REvil’ the New GandCrab Ransomware?FEC: Campaigns Can Use Discounted Cybersecurity ServicesPatch Tuesday Lowdown, July 2019 EditionWho’s Behind the GandCrab Ransomware? darkreading.com Bluetooth Bug Enables Tracking on Windows 10, iOS & macOS Devices800K Systems Still Vulnerable to BlueKeepSprint Reveals Account Breach via Samsung WebsiteA Password Management Report CardData Loss, Leakage Top Cloud Security ConcernsFor Real Security, Don't Let Failure Be Your Measure of Success threatpost.com Wormable BlueKeep Bug Still Threatens Legions of Windows SystemsFirmware Bugs Plague Server Supply Chain, 7 Vendors ImpactedBluetooth Flaws Could Allow Global Tracking of Apple, Windows 10 DevicesMassive Malvertising Campaign Reaches 100M Ads, Manipulates Supply ChainStrongPity APT Returns with Retooled SpywareLenovoEMC Storage Gear Leaks Sensitive Financial Data welivesecurity.com BlueKeep patching isn’t progressing fast enoughHow your Instagram account could have been hijackedWeek in security with Tony AnscombeCybercrime seen to be getting worse: The time to act is nowBuhtrap group uses zero‑day in latest espionage campaignsWindows zero‑day CVE‑2019‑1132 exploited in targeted attacks scmagazine.com JetBlue flight evacuated after photo of suicide vest sent to crew, passengers via AirDropMalware framework generates 1B fake ad impressions in 3 monthsDutch police, McAfee nail macro toolkit-builder, ‘Rubella’2.2 million Clinical Pathology Laboratories patients exposed in AMCA breachSprint customer data breached via Samsung website flaw helpnetsecurity.com Flaw in Iomega, LenovoEMC NAS devices exposes millions of files on the InternetOver 80% of network teams play a role in security effortsThe importance of hardening firmware securityEnterprises catching up with the explosion of cloud use and shadow IT in the workplaceCompanies still don’t understand the importance of DMARC adoption trendmicro.com New Azure Marketplace Pay-As-You-Go Billing for Trend Micro Deep Security as a ServiceThis Week in Security News: Banking Malware and Phishing CampaignsMigrating Network Protection to the Cloud with ConfidenceWhere Will Ransomware Go In The Second Half Of 2019?Trend Micro Named Best Company To Work For In Taiwan securityweek.com AMCA Breach Impacts 2.2 Million Patients of Clinical Pathology LaboratoriesEvilGnome Malware Helps Hackers Spy on Linux UsersSLUB Backdoor Spreads via Newly Patched VulnerabilityBMC Firmware Vulnerabilities Affect Lenovo, Gigabyte ServersEndpoint Security Evolving Against Airport Searches, GDPR siliconrepublic.com Sprint says customer accounts were breached via Samsung.comFernando Corbató, father of the computer password, has diedHave you considered a career in cybersecurity?Are you interested in a career in cybersecurity?Cork data protection firm snapped up by US player in €5.25m deal nakedsecurity.sophos.com RDP exposed: the wolves already at your doorMicrosoft, Google and Apple clouds banned in Germany’s schoolsFacebook rolls out anti-scam reporting tool in UKResearchers hide data in music – and human ears can’t detect itGandCrab ransomware revisited – is it back under a (R)evil new guise? securityintelligence.com Enterprise Mobility Management Gets PersonalThe Expiration Date on Passwords Has ExpiredThe Fine Art of Protecting Microsoft Office 365 Apps With Multifactor AuthenticationThe Wild West Era Has Ended — What’s Next for Data Privacy?Threat Intelligence Is the SOC’s Road Map to DNS Security securityboulevard.com Artificial intelligence in cyber security: The savior or enemy of your business?Ducks-In-A-RowBSides Cleveland 2019, Jeremy Mio’s ‘Public Partnership Panel For Security Response’XKCD, ‘First News Memory’BSides Cleveland 2019, Dennis Goodlett’s ‘Eval Villain: Simplifying DOM XSS And JS Reversing’ grahamcluley.com Apple pushes out another silent update to address flaws in RingCentral and other video conferencing appsUnlock the power of threat intelligence with this practical guide. Get your free copy nowAlan Turing – the face of the new £50 noteHow any Instagram account could be hacked in less than 10 minutesApple pushes out silent update to remove sketchy Zoom code from Macs cyberdefensemagazine.com Bitglass 2019 Cloud Security Report: Only 20 Percent of Organizations Use Cloud Data Loss Prevention Despite Storing Sensitive Information in the CloudLa Porte County finally opted to pay $130,000 RansomCould Your Reactive Cyber Security Approach Put You Out Of Business?Surveying Anti-Phishing Standards – Part 2Ransomware: Nothing to Sneeze At