Avoid The Hack!

#Google Changed Its #Privacy Policy: Does the Tech Giant Now Use All Your Data to Train Its AI?

From @Tutanota@mastodon.social

Color me surprised. 🤫

#ai #privacymatters

https://tutanota.com/blog/google-trains-ai-with-your-data

Avoidthehack updates #private #browser Comparison Tool

- Added Mullvad @mullvadnet@mastodon.online browser
- Added Comodo IceDragon
- Fixed image display issues on some #browsers
- Corrected existing information

#privacy #privacymatters #opensource

https://avoidthehack.com/util/browser-comparison

How to block emails on #Gmail, Outlook, Proton Mail, Yahoo Mail, and #Apple Mail

From @protonmail@mastodon.social

#privacy #email #privacymatters

https://proton.me/blog/how-to-block-emails

How to share files and sensitive information securely

@bitwarden@fosstodon.org shows you how to use Bitwarden Send to share files and sensitive information in a more secure way.

In most cases, you should avoid sending sensitive information via email (even if not a file).

#opsec #cybersecurity #security

https://bitwarden.com/blog/how-to-share-files-and-sensitive-information-securely/

Critical TootRoot bug lets attackers hijack #Mastodon servers

> bad actor sends malicious toot
> instances process malicious toot
> spawns webshell
> bad actor uses webshell to assume control over the server

There is a #security patch for this - all Mastodon server admins should update if they haven't already.

#cybersecurity #infosec

https://www.bleepingcomputer.com/news/security/critical-tootroot-bug-lets-attackers-hijack-mastodon-servers/

New ‘Big Head’ ransomware displays fake Windows update alert

Suspected to be spreading primarily through *gasp* Malvertising.

During the encryption stage, this #ransomware displays a loading screen similar to a #windows update.

#cybersecurity #infosec #security

https://www.bleepingcomputer.com/news/security/new-big-head-ransomware-displays-fake-windows-update-alert/

How Threads’ #privacy policy compares to Twitter’s (and its rivals’)

#threads has abysmal privacy... just reading the list in this article is exhausting.

I fail to see how it is an "acceptable middleground" for users being introduced into the #fediverse (with the talk of ActivityPub integration.)

#privacymatters #mastodon

https://arstechnica.com/security/2023/07/how-threads-privacy-policy-compares-to-twitters-and-its-rivals/

CISA Adds Five Known #Vulnerabilities to Catalog

CVE-2023-32046 Microsoft Windows MSHTML Platform Privilege Escalation
CVE-2023-32049 Microsoft Windows Defender SmartScreen Security Feature Bypass
CVE-2023-35311 Microsoft Outlook Security Feature Bypass
CVE-2023-36874 Microsoft Windows Error Reporting Service Privilege Escalation
CVE-2022-31199 Netwrix Auditor Insecure Object Deserialization

#cybersecurity #infosec #security

https://www.cisa.gov/news-events/alerts/2023/07/11/cisa-adds-five-known-vulnerabilities-catalog

#Apple releases emergency #update to fix zero-day exploited in attacks

CVE-2023-37450 - code execution in the WebKit browser engine (which powers Safari).

#cybersecurity #infosec #security

https://www.bleepingcomputer.com/news/apple/apple-releases-emergency-update-to-fix-zero-day-exploited-in-attacks/

@GossiTheDog@cyberplace.social Git off yer phone

CISA Adds One Known #Vulnerability to Catalog

CVE-2021-29256 Arm Mali GPU #Kernel Driver Use-After-Free

#cybersecurity #security #infosec #exploit

https://www.cisa.gov/news-events/alerts/2023/07/07/cisa-adds-one-known-vulnerability-catalog