September 15, 2016
Cybersecurity In The Obama Era
Hack an Android phone remotely, and win $200,000
September 15, 2016
Hackers found 47 new vulnerabilities in 23 IoT devices at DEF CON
September 15, 2016
NTP reflection attacks hit record high
September 15, 2016
Mr. Robot eps2.9pyth0n-pt1.p7z – the security review
September 15, 2016
Hacker and chums jailed over gold bullion hack, track ‘n’ grab scam
September 15, 2016
Turning the tables on a scammer… by contacting his mum on Facebook
September 15, 2016
Gutted: 6.6M cleartext creds, dox, breached in ClixSense site hack
September 15, 2016
Double-dipping malware steals iOS creds and roots Android
September 15, 2016
Google GPS grab felt like a feature, was actually a bug
September 15, 2016
35,000 ARRIS cable modems at risk from firmware dumper bot
September 15, 2016
French hackers selling hidden .22 calibre pen guns on secret forums
September 15, 2016
It was discovered that there was a CSRF vulnerability in mailman, a web-based mailing list manager, which could allow an attacker to obtain a user’s password. For the stable distribution (jessie), this problem has been fixed in version 1:2.1.18-2+deb8u1. For the unstable distribution (sid), this problem has been fixed in version 1:2.1.23-1. We recommend that […]
September 15, 2016
Several vulnerabilities have been discovered in the chromium web browser. CVE-2016-5170 A use-after-free issue was discovered in Blink/Webkit. CVE-2016-5171 Another use-after-free issue was discovered in Blink/Webkit. CVE-2016-5172 Choongwoo Han discovered an information leak in the v8 javascript library. CVE-2016-5173 A resource bypass issue was discovered in extensions. CVE-2016-5174 Andrey Kovalev discoved a way to bypass […]
September 15, 2016
Discovered: September 15, 2016 Updated: September 15, 2016 3:44:33 PM Type: Trojan Infection Length: Varies Systems Affected: Linux Linux.Trojan is a generic detection used to identify malicious software that targets computers running the Linux operating system. Antivirus Protection Dates Initial Rapid Release version September 15, 2016 Latest Rapid Release version September 15, 2016 Initial Daily […]
September 15, 2016
Google Play obsessed with tracking Android users’ every move
September 14, 2016
DualToy Windows Trojan Attacks Android, iOS Devices
September 14, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft ASP.NET Core MVC is prone to multiple privilege escalation vulnerabilities. Attackers can exploit these issues to gain elevated privileges. Microsoft ASP.NET Core MVC 1.0.0 is vulnerable. Technologies Affected Microsoft ASP.NET Core MVC 1.0.0 Recommendations Block external access at the network boundary, unless external parties require service. […]
September 14, 2016
Risk Medium Date Discovered September 13, 2016 Description Microsoft Application Virtualization is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2007 SP3 Microsoft Office 2010 Service Pack 2 (32-bit editions) Microsoft Office 2010 Service Pack 2 (64-bit editions) […]
September 14, 2016
Phony Pokémon GO Android App Gave Attackers Root Access
September 14, 2016
Snowden Makes Case for a Presidential Pardon
September 14, 2016
An update for flash-plugin is now available for Red Hat Enterprise Linux 5 Supplementary and Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Critical: flash-plugin security update Advisory ID: RHSA-2016:1865-01 Product: Red Hat Enterprise Linux Supplementary Advisory […]
September 14, 2016
Slackware: 2016-257-01: mariadb / mysql: Security Update Posted by Anthony Pell New mariadb or mysql packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. [More Info…] [slackware-security] mariadb / mysql (SSA:2016-257-01) New mariadb or mysql packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a […]
September 14, 2016
WADA cyberattack compromises agency’s database
The World Anti-Doping Agency (WADA) has revealed that it was the victim of a cyberattack, which it has attributed to the Russian cyberespionage group, Tsar Team (APT28). According to the agency, the group, which also goes by the moniker Fancy Bear, was able to gain access to its Anti-Doping Administration and Management System (ADAMS) database. […]
September 14, 2016
AdBlock Plus launches its ad-selling platform
September 14, 2016
Tenable brings network visibility into Google Cloud Platform
September 14, 2016
Adblock Plus wants to put more ads on your screen
September 14, 2016
A single ransomware network has pulled in $121 million
September 14, 2016
Pay-to-click ad service hacked, 6.6M plaintext passwords dumped
September 14, 2016
Google Project Zero Prize Pays $200,000 for Critical Vulnerability Chains
September 14, 2016
Surveillance Middlemen Make it Harder to Track Who’s Responsible For Hacks
September 14, 2016
Long-Secret Stingray Manuals Detail How Police Can Spy on Phones
September 14, 2016
Instagram users to take control over abusive comments
September 14, 2016
Microsoft Intune to support Android for Work
September 14, 2016
Google offers $200K for top prize in new Android hack challenge
September 14, 2016
Hackers smear Olympic athletes with data dump of medical files
September 14, 2016
US National Security Agency gets CREST smile
September 14, 2016
Logins for US Navy, NASA’s JPL among US gov logins sold on deepweb
September 14, 2016
Great British Block-Off: GCHQ floats plan to share its DNS filters
September 14, 2016
Top infosec vendors, cops, liberate thousands from ransomware
September 14, 2016
Researcher reports XSS hole in Google France
September 14, 2016
Dawid Golunski discovered that the mysqld_safe wrapper provided by the MySQL database server insufficiently restricted the load path for custom malloc implementations, which could result in privilege escalation. The vulnerability was addressed by upgrading MySQL to the new upstream version 5.5.52, which includes additional changes, such as performance improvements, bug fixes, new features, and possibly […]
September 14, 2016
Risk Level: Very Low. Type: Trojan.
September 14, 2016
Risk Level: Very Low. Type: Trojan.
September 14, 2016
Risk Level: Very Low. Type: Trojan.
September 14, 2016
A patchtastic day for Flash and Windows users – don’t delay!
September 13, 2016
Will iOS 10, “the biggest release of iOS ever,” brick your device?
September 13, 2016
This man is creating a chatbot for his mom so they can talk after she dies
September 13, 2016
Hacker jailed after stealing thousands of pounds worth of gold bullion
September 13, 2016
Microsoft Patches 47 Vulnerabilities with September Patch Tuesday
September 13, 2016
‘Now the cyber is so big’ says Donald Trump
September 13, 2016
Backdoor targeting corporate data through… Microsoft Publisher files?
September 13, 2016
iOS 10 Security Updates Move to HTTPS
September 13, 2016
Red Hat: 2016:1858-01: ruby193-rubygem-actionpack: Moderate Advisory Posted by Anthony Pell An update for ruby193-rubygem-actionpack is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: ruby193-rubygem-actionpack security update Advisory ID: RHSA-2016:1858-01 Product: Red Hat Software Collections […]
September 13, 2016
Red Hat: 2016:1857-01: ror40-rubygem-actionpack: Moderate Advisory Posted by Anthony Pell An update for ror40-rubygem-actionpack is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: ror40-rubygem-actionpack security update Advisory ID: RHSA-2016:1857-01 Product: Red Hat Software Collections […]
September 13, 2016
Red Hat: 2016:1855-01: rh-ror42: Moderate Advisory Posted by Anthony Pell An update for rh-ror42-rubygem-actionview, rh-ror42-rubygem-activerecord, and rh-ror42-rubygem-actionpack is now available for Red Hat Software Collections. [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-ror42 security update Advisory ID: RHSA-2016:1855-01 Product: Red Hat Software Collections Advisory URL: https://rhn.redhat.com/errata/RHSA-2016-1855.html Issue date: 2016-09-13 CVE Names: CVE-2016-6316 CVE-2016-6317 […]
September 13, 2016
Red Hat: 2016:1856-01: rh-ror41-rubygem-actionview: Moderate Advisory Posted by Anthony Pell An update for rh-ror41-rubygem-actionview is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-ror41-rubygem-actionview security update Advisory ID: RHSA-2016:1856-01 Product: Red Hat Software Collections […]
September 13, 2016
An update for libarchive is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: libarchive security update Advisory ID: RHSA-2016:1844-01 Product: Red Hat Enterprise Linux […]
September 13, 2016
An update for libarchive is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: libarchive security update Advisory ID: RHSA-2016:1850-01 Product: Red Hat Enterprise Linux […]
September 13, 2016
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: chromium-browser security update Advisory ID: RHSA-2016:1854-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://rhn.redhat.com/errata/RHSA-2016-1854.html Issue date: 2016-09-12 CVE Names: […]
September 13, 2016
Adobe Back With New Flash Player Security Update
September 13, 2016
Risk Level: Very Low. Type: Trojan.
September 13, 2016
Discovered: September 12, 2016 Updated: September 13, 2016 3:19:08 PM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Trojan.Riccietex is a Trojan horse that installs potentially malicious software and modifies browser settings […]
September 13, 2016
How Google Play tracks you even if your other apps don’t
September 13, 2016
Tor Joins Movement Against Expanding Hacking Powers
September 13, 2016
9/11 hoax story tops Facebook Trending Topics
September 13, 2016
Anonymous ‘Fancy Bears’ Hack World Anti-Doping Agency (WADA) Again
September 13, 2016
Could a phone steal a secret product prototype off your 3D printer?
September 13, 2016
Judge Rules Use of FBI Malware Is A ‘Search’
September 13, 2016
Kingpin Denial of Service website vDOS gets taken out by hacker
September 13, 2016
UK oversight body tipped to examine phone snooping tech in prisons
September 13, 2016
Facebook Post Tagging Scam Steals Your Login Credentials
September 13, 2016
Generic OS X Malware Detection Method Explained
September 13, 2016
How encryption molded crypto-ransomware
Ransomware is a major threat that keeps growing over time. According to Cisco’s recent midyear report, it dominates the malware market and is the most profitable malware type in history. By now, it seems unlikely any regular reader of our blog does not already know something about ransomware. If you do not—or would like a […]
September 13, 2016
Security Solved: Company says their tech renders servers hack proof
September 13, 2016
DDoS Attacks Up by 75 Percent in Q2 2016
September 13, 2016
Mr. Robot eps2.8_h1dden-pr0cess.axx – the security review
September 13, 2016
Bad news: MySQL can dish out root access to cunning miscreants
September 13, 2016
Afraid of online hacks? Worry more about your phone
I talk a lot about the security problems and weaknesses of the internet, as well as the devices connected to it. It’s all true, and we badly need improvements. Yet the irony is that security in our online world is actually better than in our physical world. Think of how many people are scammed by […]
September 13, 2016
Action Fraud warns of fraudulent anti-fraud warnings posing as Action Fraud
September 13, 2016
IP telephony biz VoIPtalk quietly admits to possible data breach
September 13, 2016
Security takes a backseat for uninterrupted, video game marathons
��}ے�ƒ��(A�”i/}o��%�:#YZ�|�gdmG(���f��8��O�1���32_��YA6�M��t�%�ʪ�����ʪ|t��룷�}�����Ww����z���5�b��4t��q��? ��0��u�
September 13, 2016
Infected Android phones could flood America’s 911 with DDoS attacks
September 13, 2016
Dropbox apologies for clunky administrator account access on Macs
September 13, 2016
Risk Medium Date Discovered September 13, 2016 Description Microsoft Office is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Outlook 2007 Microsoft Outlook 2010 (32-bit editions) Service Pack 2 Microsoft Outlook 2010 […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code on the target system. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Risk High Date Discovered September 13, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]
September 13, 2016
Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression / decompression library, may result in denial of service or the execution of arbitrary code if a malformed JPEG 2000 file is processed. For the stable distribution (jessie), these problems have been fixed in version 2.1.0-2+deb8u1. We recommend that you upgrade your openjpeg2 packages.
September 12, 2016