SweetOps #security for July, 2019

Archive: https://archive.sweetops.com/security/

2019-07-09

joshmyers

https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5

Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website! attachment image

Vulnerability in the Mac Zoom Client allows any malicious website to enable your camera without your permission. The flaw potentially…

2019-07-13

Maciek Strömich

08:05:38 AM

https://discussions.agilebits.com/discussion/105305/setup-with-standalone-vault-can-sync-from-desktop-apps/

Setup with standalone vault [can sync from desktop apps] - Page 3

Howdy, I am also disappointed in this feature removal.

Maciek Strömich

08:06:47 AM

Something to be aware of when choosing pw manager just for local storage option

Maciek Strömich

08:09:03 AM

https://nvd.nist.gov/vuln/detail/CVE-2019-13567 zoom vuln became an RCE

2019-07-24

Maciek Strömich

07:36:26 AM

https://mobile.twitter.com/scriptjunkie1/status/1152280517972299777

2019-07-30

Andriy Knysh (Cloud Posse)

03:19:48 PM

https://www.forbes.com/sites/jeanbaptiste/2019/07/30/more-than-100-million-consumer-personal-data-leaked-after-a-massive-cloud-breach-at-capital-one/

More Than 100 Million Consumer Personal Data Leaked After A Massive Cloud Breach At Capital One attachment image

Atherton Research’s Principal Analyst and Futurist Jeb Su offers his key takeaways of the latest Capital One massive data breach scandal that has affected over 100 million individuals in the United States and Canada.

Igor

04:20:44 PM

These headlines are barely shocking anymore. > 10 million is the new normal when it comes to data breaches.

Erik Osterman (Cloud Posse)

05:52:30 PM