Suche
Beiträge, die mit Security getaggt sind
• Folgen: https://www.kuketz-blog.de/bleib-aktuell/
• Forum: https://www.kuketz-forum.de/
• Chat: https://www.kuketz-blog.de/chat/
Bleib informiert und diskutiere mit!
#blog #sicherheit #security #datenschutz #privacy #mastodon #newsletter #rss #matrix #signal #discourse #forum
Bleib aktuell
RSS, Newsletter oder Social Media: Immer informiert über neue Beiträge • IT-Sicherheit & Datenschutz aus Karlsruhewww.kuketz-blog.de
The focus of civil society has been taken up with climate change as an existential threat, so the build up of nukes in the US, China & Russia has (perhaps) escaped out notice.... Now Jessica Matthews (Carnegie) sees a revival of the sorts of nuclear politics that for those around my age (now in our 50s/60s) will be both familiar from our past & likely unwelcome.... it doesn't look good.
#NuclearWeapons #security
https://www.theguardian.com/world/2024/nov/14/nuclear-weapons-war-new-arms-race-russia-china-us
Amid an economic crisis caused by Israeli policies and Palestinian Authority corruption, teachers are bringing #schools and streets to a standstill until their demands are met: https://www.972mag.com/palestinian-teachers-strike-pa-repression/ #WestBank #Gaza #occupation #education #security
Defying PA repression, Palestinian teachers lead biggest strike in years
Amid an economic crisis caused by Israeli policies and PA corruption, teachers are bringing schools and streets to a standstill until their demands are met.Ben Reiff (+972 Magazine)
Wired has published a guide to protecting yourself from surveillance by the US government
The guide discusses the potential increase in government surveillance under a second Trump administration and offers advice on upgrading personal privacy protections, including using end-to-end encrypted messengers and securing devices.
#privacy #security #civilrights
Google fixed two actively exploited Android zero-day flaws as part of its November security updates, addressing a total of 51 vulnerabilities. Tracked as CVE-2024-43047 & CVE-2024-43093, the two issues are marked as exploited in limited, targeted attacks.
https://source.android.com/docs/security/bulletin/2024-11-01
#google #android #update #zerodays #it #security #privacy #engineer #media #tech #news
#privacy #security #anonymity #journalism #whistleblowing
https://mullvad.net
#privacy #security #VPN #AzireVPN #MullvadVPN
Mullvad VPN - Free the internet
Free the internet from mass surveillance and censorship. Fight for privacy with Mullvad VPN and Mullvad Browser.Mullvad
With Trump, Netanyahu’s got his work cut out for him
“Trump’s not going to give him a blank check.”Jamie Dettmer (POLITICO)
New Russian church raises suspicions in Swedish town
It’s feared Russia could use the church as cover for future intelligence or sabotage operations.Charlie Duxbury (POLITICO)
-- Niccolo Machiavelli
⬆ #Wisdom #Quotes #NiccoloMachiavelli #Security #Vice #Virtue
⬇ #Photography #Panorama #Palms #Florida
Iran’s Nuclear Program Can’t Be Bombed Out of Existence - EUROPE SAYS
The Middle East is on the brink of full-scale regional war. Israel recently launched retaliatory strikes against Iran.EUROPE SAYS (EUROPESAYS.COM)
Security Boosted For France-Israel Match - EUROPE SAYS
Text size A high police presence is being prepared for the France v Israel Nations League match atEUROPE SAYS (EUROPESAYS.COM)
Greece’s main opposition further dismantled – POLITICO - EUROPE SAYS
In September 2023, Kasselakis was elected from nowhere to head Syriza. Since then, the party has been miredEUROPE SAYS (EUROPESAYS.COM)
https://www.bbc.com/news/articles/cz7wl7rpndjo
"A DNA-testing firm appears to have ceased trading - without telling its customers what has happened to the highly sensitive data they shared with it.
Atlas Biomed, which has offices in London, offered to provide insights into people's genetic make up as well as their predisposition to certain illnesses."
@BBCNews
#UK #London #DNA #AtlasBiomed #BBC #privacy #security #press
I gave my DNA to tracking company - then it vanished
Customers of Atlas Biomed are angry and worried about what's happened to the highly sensitive data they shared.Zoe Kleinman (BBC News)
Greece’s main opposition further dismantled
Syriza party’s recently deposed leader Stefanos Kasselakis announced the creation of a new political movement, taking at least four MPs with him.Nektaria Stamouli (POLITICO)
Iran Update, November 8, 2024 - EUROPE SAYS
Iran Update, November 8, 2024 Johanna Moore, Siddhant Kishore, Annika Ganzeveld, Ben Rezaei, Avery Borens, Adiv Kuray,EUROPE SAYS (EUROPESAYS.COM)
(2019) https://www.declassifieduk.org/how-the-uk-security-services-neutralised-the-countrys-leading-liberal-newspaper/
#TheGuardian #Assange #Corbyn #MI5 #MI6 #LabourParty #Labour #England #Britain #UK #centreLeft #leftOfCentre #elections #UKPol #politics #SocialDemocracy #SocDem #media #security #manipulation #coOpting #conflation #confusion #antisemitism #Guardian #DumpTheGuardian #manufacturingConsent
How the UK Security Services neutralised the country's leading liberal newspaper
The Guardian, Britain’s leading liberal newspaper with a global reputation for independent and critical journalism, has been successfully targeted by security agencies.MARK CURTIS (Declassified Media ltd)
The end of Pax Americana
When the U.S. inaugurates Donald J. Trump as its 47th president, the country and world will be very different because of it.Ivo Daalder (POLITICO)
"In July 2024, ahead of the Summer Olympics in France, the threat actor hacked a French commercial dynamic display provider in an effort to show photo montages denouncing the participation of Israeli athletes in the #Olympics.
In addition, ASA has conducted IP camera hacking, mainly targeting devices in #Israel, but also in #Gaza and #Iran.
ASA made images and content from Israeli cameras available for clients to access via several servers beginning in October 2023...”
https://www.securityweek.com/us-israel-describe-iranian-hackers-targeting-of-olympics-surveillance-cameras/
French security officials detained in diplomatic spat in Jerusalem
Tensions have been rising between Israel and France over strikes in Lebanon and the war in Gaza.Clea Caulcutt (POLITICO)
https://scidsg.medium.com/how-to-check-your-iphone-for-pegasus-338bafb2358e
#threatmodel #security #iPhone #hacking #phishing #amnesty #journalism #opensource #press #law
https://scidsg.medium.com/dont-worry-usable-security-and-privacy-are-here-4c55e7e943ff
#news #election #security #journalism
▶️ We published a new article: "The New German #Security Package: #Digital #Surveillance and #DataProtection". More in our #blog: https://www.vioffice.de/blog/sicherheitspaket-digitale-ueberwachung/ 🇬🇧🇩🇪
▶️ ViOffice Cloud for free! Use our full ViOffice #Cloud with up to 3GB storage including all functions (storage, chat, videocall, groupware, taskboard, polls and more) for free. Register at: https://cloud01.vioffice.de/apps/registration/ 🚀
The new German Security Package: Digital Surveillance and Data Protection - ViOffice
The new German security package: far-reaching digital surveillance and possible intrusions into citizens' privacy.Pascal Langer (ViOffice)
Iran Update, November 5, 2024 - EUROPE SAYS
Iran Update, November 5, 2024 Carolyn Moorman, Johanna Moore, Annika Ganzeveld, Andie Perry, Siddhant Kishore, Ben Rezaei,EUROPE SAYS (EUROPESAYS.COM)
5 things to know about migration czar Magnus Brunner’s European Parliament hearing – POLITICO - EUROPE SAYS
It helped that after the first section of the hearing, MEPs didn’t have a chance to follow upEUROPE SAYS (EUROPESAYS.COM)
Israel’s Netanyahu fires defense minister, saying mutual trust has ‘cracked’
Yoav Gallant will be replaced in Cabinet by Foreign Minister Israel Katz.Elena Giordano (POLITICO)
The free version of the popular WordPress plugin LiteSpeed Cache has fixed a dangerous privilege elevation flaw on its latest release that could allow unauthenticated actors to gain admin rights.
[CVE-2024-50550 CVSS score: 8.1]
https://patchstack.com/articles/rare-case-of-privilege-escalation-patched-in-litespeed-cache-plugin/
#wordpress #litespeed #flaw #it #security #privacy #engineer #media #tech #news
Rare Case of Privilege Escalation Patched in LiteSpeed Cache Plugin - Patchstack
A vulnerability in LiteSpeed Cache allowed unauthorized admin access; fixed in version 6.5.2, with Patchstack users automatically protected.Rafie Muhammad (Patchstack)
Researchers have found new versions of a sophisticated Android financial-fraud Trojan that’s notable for its ability to intercept calls a victim tries to place to customer-support personnel of their banks.
https://www.zimperium.com/blog/mishing-in-motion-uncovering-the-evolving-functionality-of-fakecall-malware/
#android #fakecall #vishing #malware #it #security #privacy #engineer #media #tech #news
![[ImageSource: Zimperium]
Overview of latest FakeCall attacks.
The FakeCall malware typically infiltrates a device through a malicious app downloaded from a compromised website or a phishing email. The app requests permission to become the default call handler. If granted, the malware gains extensive privileges.
A fake call interface mimics the actual Android dialer, displaying trusted contact information and names, elevating the level of deception to a point that's hard for victims to realize.
What makes this malware so dangerous is that when a user attempts to call their financial institution, the malware secretly hijacks the call and redirects it to an attacker's phone number instead.](https://nerdculture.de/system/media_attachments/files/113/413/326/251/269/062/original/531c03137c2b88d1.png "[ImageSource: Zimperium]
Overview of latest FakeCall attacks.
The FakeCall malware typically infiltrates a device through a malicious app downloaded from a compromised website or a phishing email. The app requests permission to become the default call handler. If granted, the malware gains extensive privileges.
A fake call interface mimics the actual Android dialer, displaying trusted contact information and names, elevating the level of deception to a point that's hard for victims to realize.
What makes this malware so dangerous is that when a user attempts to call their financial institution, the malware secretly hijacks the call and redirects it to an attacker's phone number instead.")
Mishing in Motion: Uncovering the Evolving Functionality of FakeCall Malware - Zimperium
In this blog post we share Zimperium’s Zero-Day Protection against the Water Makara Spear-Phishing campaign.Zimperium
The company also seeks to improve the system's security and has expanded its security bounty program to include rewards of up to [$1 Million] for vulnerabilities that could compromise “the fundamental security and privacy guarantees of PCC”.
https://security.apple.com/blog/pcc-security-research
#apple #pcc #vm #securityresearch #bug #bounty #programming #ai #it #security #privacy #engineer #media #tech #news
![[ImageSource: Apple]
Interacting with the Private Cloud Compute client from the Virtual Research Environment.
Apple provides a Virtual Research Environment (VRE), which replicates locally the cloud intelligence system and allows inspecting it as well as testing its security and hunting for issues.
“The VRE runs the PCC node software in a virtual machine with only minor modifications. Userspace software runs identically to the PCC node, with the boot process and kernel adapted for virtualization,” Apple explains, sharing documentation on how to set up the Virtual Research Environment on your device.
VRE is present on macOS Sequia 15.1 Developer Preview and it needs a device with Apple silicaon and at least 16GB of unified memory.
<https://security.apple.com/documentation/private-cloud-compute/vresetup>](https://nerdculture.de/system/media_attachments/files/113/407/824/963/613/937/original/a72a81f16cf58a68.png "[ImageSource: Apple]
Interacting with the Private Cloud Compute client from the Virtual Research Environment.
Apple provides a Virtual Research Environment (VRE), which replicates locally the cloud intelligence system and allows inspecting it as well as testing its security and hunting for issues.
“The VRE runs the PCC node software in a virtual machine with only minor modifications. Userspace software runs identically to the PCC node, with the boot process and kernel adapted for virtualization,” Apple explains, sharing documentation on how to set up the Virtual Research Environment on your device.
VRE is present on macOS Sequia 15.1 Developer Preview and it needs a device with Apple silicaon and at least 16GB of unified memory.
<https://security.apple.com/documentation/private-cloud-compute/vresetup>")
https://www.bleepingcomputer.com/news/security/hackers-exploit-wordpress-plugin-flaw-to-infect-3-300-sites-with-malware/
#technology #tech #web #blogging #security #cybersecurity #hacked #hackers #wordpress
https://www.wired.com/story/russia-hackers-microsoft-source-code/
#technology #tech #hacked #hackers #microsoft #security #cybersecurity #datasecurity
Russian Hackers Stole Microsoft Source Code—and the Attack Isn’t Over
Plus: An ex-Google engineer gets arrested for allegedly stealing trade secrets, hackers breach the top US cybersecurity agency, and X’s new feature exposes sensitive user data.Dhruv Mehrotra (WIRED)
Will this improve my security, privacy, coonvenience?
I'll let you know.
#2fa #mfa #security #securitykey
How to Secure Your Kid's Android Device
After finding risky software on an Android (Google’s mobile operating system) device marketed for kids, we wanted to put together some tips to help better secure your kid's Android device (and even your own).Electronic Frontier Foundation