Oktacron logo
Cyber security aggregate rss news

Cyber security aggregator - feeds history
image for How to cut back on s ...

 Tips

Social networks becoming a burden? When out-of-control social media taxes your nerves, steals your focus and distracts you from important tasks, it’s time to do a digital detox. Today we will tell you how to get it done in a few easy steps. Step 1. Thin out your feed Unfollow anyone who doesn’t contribute   show more ...  

to your experience — a former classmate newly obsessed with Sanskrit, an old hobby group that’s basically just ads now, whatever else you simply don’t want to deal with. If you’re not getting any benefit from the content, you have no need to invite it onto your feed. If an account is one you’d rather not unfollow or unsubscribe from, try muting it instead. Social networks let you hide updates from accounts without unsubscribing. Your friends won’t even know you’ve muted them. Step 2. Centralize communications Social networks are much more than just feeds; they’re also places to stay in touch with friends, relatives, and colleagues. But if you’re talking with people on half a dozen platforms, you may be wasting lots of time checking inboxes — even if no one has written to you. Try deciding with your friends where they should contact you, and centralize your correspondence on one or two platforms. That way you’ll be able to check the others much less often with no fear of missing an important message. Step 3. Clear up your screen Have you ever picked up your phone to check the weather, and then seen the Facebook icon, opened it just for a second, and ended up wasting two hours down a rabbit hole? To keep that from happening, try moving your social media icons out of sight. For example, hide them in a folder or send them back to your third or fourth page of apps — out of sight, out of mind. Step 4. Curate notifications No matter how responsible you may be about avoiding your feed and even keeping certain icons out of sight, if a social network sends a notification about a new post, you can easily, unthinkingly press that sneaky little window and find yourself right back in the thick of things. For help concentrating on what’s important, try disabling unnecessary notifications. To learn how, check out our instructions for iOS, macOS, Windows 10, and Android. Step 5. Configure Screen Time or Digital Wellbeing Seeing exactly how many hours a day you waste roaming social networks and messaging apps can be sobering. Apps to help with self-control are easy to find, but you don’t need to download anything for a view into your digital habits: Open your smartphone’s settings and enable Screen Time (in iOS) or Digital Wellbeing (in Android). Put the widget with the statistics in a place where you’ll always see it. And if seeing statistics isn’t enough, configure the app to let you open the social network only at certain times or for a limited amount of time. Step 6. Take a break Whenever you start something new, the most important — and hardest — thing is to establish new habits. Try spending a couple of weeks avoiding the apps that consume most of your time — when you reach for one out of habit, you can try imagining you’ve gone on a hike and don’t have an Internet connection. Better yet, actually get away from the Internet if you can. Cut off the flow of information so you can reset and no longer feel like you’re missing out. Step 7. Delete the app or your profile This step is optional; the suggestions above may have helped you attain the digital freedom you’re looking for, but if not, consider the drastic measure of removing the app from your phone or even deleting your account altogether. Don’t worry — you don’t have to lose your posts, messages, or photos. Almost every social network lets you keep all of your data even if you deactivate your profile. We’ve posted instructions on how to do this for Facebook, Instagram, Snapchat, and Twitter. Step 8. Keep an eye on yourself Having freed yourself from today’s social media overload, take a sec to congratulate yourself — but keep an eye on yourself as well. It’s entirely possible your brain will try to return to old habits. If in a couple of months you find yourself online at 3 a.m. debating the pressing issues in some stranger’s post comments, just go back and repeat these simple steps.

 Malware and Vulnerabilities

The q-logger skimmer has been active at least since April 2021. The code used by the skimmer is dense and uses obfuscation techniques, thereby making identification using signatures challenging.

 Malware and Vulnerabilities

Most publicly-exposed Prometheus endpoints can be accessed from the Internet without authentication, and JFrog found nearly 27,000 of them using Shodan, and 43,000 hosts using ZoomEye.

 Trends, Reports, Analysis

In a short tweet today, exploit broker Zerodium said that it is looking to acquire zero-day exploits for vulnerabilities in three popular virtual private network (VPN) service providers on the market.

 Malware and Vulnerabilities

The Tor payment portal and data leak site of REvil was sent to oblivion after an unknown hacker using the same private keys hijacked the group’s domains. This is the second time that REvil has shut down its operations. Still, organizations should stay protected from such threats by keeping a reliable backup and adopting proactive defenses.

 Malware and Vulnerabilities

The lesser-known Lyceum APT seems to be on a mission to gain a foothold with its re-appearance. The gang has been associated with an attack campaign launched against entities in Tunisia. Similarities between Lyceum and the infamous DNSpionage campaign, a cluster of activity linked to the OilRig, have also been observed.

 Malware and Vulnerabilities

Symantec uncovered a new strain of ransomware, dubbed Yanluowang, targeting virtual machines in enterprises. The attackers behind the ransomware have used the genuine AdFind command line Active Directory query tool. Hackers further warned not to approach law enforcement for help.

 Malware and Vulnerabilities

Morphisec Labs unearthed a new MirrorBlast campaign aimed at financial services across Canada, the U.S., Europe, Hong Kong, and others. The campaign has an uncanny resemblance to the Russia-based TA505 group. Organizations must protect themselves with adequate protection solutions, such as anti-phishing solutions and making use of TTPs to detect and stop the malware.

 Malware and Vulnerabilities

Experts found a PoC exploit for a macOS Gatekeeper bypass flaw that was being exploited in the wild. Tracked as CVE-2021-1810, the vulnerability exploits the way in which Archive Utility handles file paths in MacOS systems. If any malware bypass this, it could be a massive compromise for a targeted system.

 Incident Response, Learnings

South African law enforcement agencies on Tuesday arrested eight foreign nationals in Cape Town for allegedly stealing US$6.9 million through an online dating scam, the police said.

 Malware and Vulnerabilities

Oracle on Tuesday announced the release of its latest quarterly Critical Patch Update (CPU), which includes a total of 419 security patches for vulnerabilities across the company’s portfolio.

 Security Products & Services

Unit 42 discovered hackers exploiting an open-source service called Interactsh; the tool generates desired domain names to help users test whether an exploit is successful. The tool allows anyone to generate specific URLs for testing on HTTP attempts and DNS queries, which help them test whether an exploit is   show more ...  

successful. Organizations must be aware of the potential misuse of the Interactsh and take proper security measures.

 Feed

Red Hat Security Advisory 2021-3945-01 - Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk   show more ...  

every once in a while, or by appending each command to a log. Issues addressed include denial of service and integer overflow vulnerabilities.

 Feed

Red Hat Security Advisory 2021-3946-01 - Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk   show more ...  

every once in a while, or by appending each command to a log. Issues addressed include denial of service and integer overflow vulnerabilities.

 Feed

Red Hat Security Advisory 2021-3944-01 - Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk   show more ...  

every once in a while, or by appending each command to a log. Issues addressed include denial of service and integer overflow vulnerabilities.

 Feed

Red Hat Security Advisory 2021-3947-01 - Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk   show more ...  

every once in a while, or by appending each command to a log. Issues addressed include denial of service and integer overflow vulnerabilities.

 Feed

Red Hat Security Advisory 2021-3880-01 - This release of Red Hat build of Quarkus 2.2.3 includes security updates, bug fixes, and enhancements. For more information, see the release notes page listed in the References section. Issues addressed include an information leakage vulnerability.

 Feed

Red Hat Security Advisory 2021-3943-01 - The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host. Red Hat Virtualization Hosts are installed using a special build of Red Hat Enterprise Linux with only the packages required to host   show more ...  

virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. Issues addressed include a bypass vulnerability.

 Feed

Red Hat Security Advisory 2021-3942-01 - Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Issues addressed include a use-after-free vulnerability.

 Feed

Red Hat Security Advisory 2021-3925-01 - Red Hat Advanced Cluster Management for Kubernetes 2.3.3 images Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private   show more ...  

cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which fix several bugs and provide security updates. Issues addressed include denial of service, information leakage, integer overflow, and out of bounds read vulnerabilities.

 Feed

Ubuntu Security Notice 5113-1 - It was discovered that a race condition existed in the Atheros Ath9k WiFi driver in the Linux kernel. An attacker could possibly use this to expose sensitive information. Alois Wohlschlager discovered that the overlay file system in the Linux kernel did not restrict private clones in   show more ...  

some situations. An attacker could use this to expose sensitive information. It was discovered that the btrfs file system in the Linux kernel did not properly handle removing a non-existent device id. An attacker with CAP_SYS_ADMIN could use this to cause a denial of service. Various other issues were also addressed.

 Feed

Red Hat Security Advisory 2021-3820-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.8.15.

 Feed

Ubuntu Security Notice 5111-2 - USN-5111-1 fixed a vulnerability in strongSwan. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. It was discovered that strongSwan incorrectly handled replacing certificates in the cache. A remote attacker could use this issue to cause strongSwan   show more ...  

to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.

 Feed

Code injection attacks, the infamous king of vulnerabilities, have lost the top spot to broken access control as the worst of the worst, and developers need to take notice. In this increasingly chaotic world, there have always been a few constants that people could reliably count on: The sun will rise in the morning and set again at night, Mario will always be cooler than Sonic the Hedgehog, and

 Feed

A highly sophisticated adversary named LightBasin has been identified as behind a string of attacks targeting the telecom sector with the goal of collecting "highly specific information" from mobile communication infrastructure, such as subscriber information and call metadata.  "The nature of the data targeted by the actor aligns with information likely to be of significant interest to signals

 Feed

Microsoft has published a new advisory warning of a security bypass vulnerability affecting Surface Pro 3 convertible laptops that could be exploited by an adversary to introduce malicious devices within enterprise networks and defeat the device attestation mechanism. Tracked as CVE-2021-42299 (CVSS score: 5.6), the issue has been codenamed "TPM Carte Blanche" by Google software engineer Chris

 Feed

A newly disclosed vulnerability affecting Intel processors could be abused by an adversary to gain access to sensitive information stored within enclaves and even run arbitrary code on vulnerable systems. The vulnerability (CVE-2021-0186, CVSS score: 8.2) was discovered by a group of academics from ETH Zurich, the National University of Singapore, and the Chinese National University of Defense

2021-10
Aggregator history
Wednesday, October 20
FRI
SAT
SUN
MON
TUE
WED
THU
OctoberNovemberDecember