ITSEC News @itsecbot@schleuss.online

#introductions This bot is posting ITSEC related news from all over the web - usually refreshes every few minutes with new stories. If you would like to see more sites included, write to the maintainer @emanuel - you might also be interested in @vulnbot

No, I Won't Link to Your Spammy Article - Presently sponsored by: Going beyond the perimeter: what a 'zero-trust' approach to security means a... more: http://feedproxy.google.com/~r/TroyHunt/~3/JG45o-lIfVg/

A Brisk Private Trade in Zero-Days Widens Their Use - More zero-day exploits coming up for sale by NSO Group and others is democratizing the attack vect... more: https://threatpost.com/brisk-private-trade-zero-days/154502/ #securityvulnerabilities #offensivecyberweapons #vulnerabilities #moreavailable #commercial #zero-days #exploits #nsogroup #fireeye #forsale

FBI Threatens ‘Zoom Bombing’ Trolls With Jail Time - The FBI is cracking down on the practice of Zoom bombing, saying the hijacking of web conferences ... more: https://threatpost.com/fbi-threatens-zoom-bombing-trolls-with-jail-time/154495/ #vulnerabilities #workfromhome #zoom-bombing #websecurity #coronavirus #zoomattack #discord #reddit #hack #zoom #fbi

Apple Safari Flaws Enable One-Click Webcam Access - The white hat hacker who discovered the vulnerabilities received a $75,000 from Apple's bug-bounty... more: https://threatpost.com/apple-safari-flaws-webcam-access/154476/ #applevulnerability #vulnerabilities #mobilesecurity #applebugbounty #webcamtakeover #applesafari #ryanpickren #safaribug #webcam #apple #macos #patch #ios

Government VPN Servers Targeted in Zero-Day Attack - The attacks are being carried out against Chinese government interests worldwide, according to Qih... more: https://threatpost.com/government-vpn-servers-zero-day-attack/154472/ #advancedpersistentthreat #chinesegovernment #vulnerabilities #cloudsecurity #remoteworking #cyberattacks #coronavirus #government #vpnservers #aptattack #darkhotel #covid-19 #qihoo360 #hacks #china

A Culture of Drive, Work Ethic, and Attention to Detail - Our guest today is Nick Kael. He’s chief technology officer at Ericom Software, a company that pro... more: https://www.recordedfuture.com/podcast-episode-153/ #podcast

Telework, the New Normal - Remote Worker Policies are Nothing New in GovernmentPolicies like TIC 3.0, OMB’s ICAM memo 19-17 and... more: https://duo.com/blog/telework-the-new-normal #industrynews

Will Apple’s “microphone switch” stop your iPad getting bugged? - A microphone switch! What will they think of next? more: https://nakedsecurity.sophos.com/2020/04/06/will-apples-microphone-switch-stop-your-ipad-getting-bugged/ #earthmicrobiomeproject #audiosnoopng #apple #ipad

iCyber-Security Rebrands to Become BlockAPT - iCyber-Security has announced that it has undergone a major rebrand to reflect the platform’s evol... more: https://www.itsecurityguru.org/2020/04/06/icyber-security-rebrands-to-become-blockapt/?utm_source=rss&utm_medium=rss&utm_campaign=icyber-security-rebrands-to-become-blockapt #pressreleases

CB-K20/0284 - Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Ein entfernter, anonymer Ang... more: https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2020/04/warnmeldung_cb-k20-0284.html

CB-K20/0285 - Der Kernel stellt den Kern des Linux Betriebssystems dar.
Ein entfernter, anonymer Angreifer kann ... more: https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2020/04/warnmeldung_cb-k20-0285.html

CB-K20/0283 - MediaWiki ist ein freies Wiki, das ursprünglich für den Einsatz auf Wikipedia entwickelt wurde.
Ei... more: https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2020/04/warnmeldung_cb-k20-0283.html

CB-K20/0286 - GnuTLS (GNU Transport Layer Security Library) ist eine im Quelltext frei verfügbare Bibliothek, di... more: https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2020/04/warnmeldung_cb-k20-0286.html

CB-K20/0282 - Firefox ist ein Open Source Web Browser.
ESR ist die Variante mit verlängertem Support.
Ein entfer... more: https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2020/04/warnmeldung_cb-k20-0282.html

CB-K19/1071 Update 2 - Der Kernel stellt den Kern des Linux Betriebssystems dar.
Hostapd (Host Access Point Daemon) ist e... more: https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2020/04/warnmeldung_cb-k19-1071_update_2.html

CB-K19/0768 Update 1 - Confluence ist eine kommerzielle Wiki-Software.
Ein entfernter, authentisierter Angreifer kann ein... more: https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2020/04/warnmeldung_cb-k19-0768_update_1.html

CB-K20/0281 Update 1 - Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Die Red Hat OpenShift Contai... more: https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2020/04/warnmeldung_cb-k20-0281_update_1.html

Rights groups appeal to governments over COVID-19 surveillance - Digital and human rights groups have joined in a rare worldwide appeal to governments to respect p... more: https://nakedsecurity.sophos.com/2020/04/06/rights-groups-appeal-to-governments-over-covid-19-surveillance/ #locationtracking #coronavirus #dataprivacy #covid-19 #privacy

CB-K20/0278 Update 2 - Chrome ist ein Internet-Browser von Google.
Ein entfernter, anonymer Angreifer kann mehrere Schwac... more: https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2020/04/warnmeldung_cb-k20-0278_update_2.html

CB-K20/0043 Update 1 - Oracle Virtualization ist eine Sammlung von Werkzeugen zur Verwaltung und zur Virtualisierung von ... more: https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2020/04/warnmeldung_cb-k20-0043_update_1.html