Menu

Latest articles

Researchers announce Linux kernel “network snooping” bug
Hacked Instagram accounts seducing users with adult dating spam
Meet DDoSCoin, the cryptocurrency that pays when you p0wn
Boffins’ blur-busting face recognition can ID you with one bad photo
SMS Privacy Given Final Nail in the Coffin by Canadian Court Ruling
Instagram Accounts Getting Hacked; Spreading Adult Content

Risk High Date Discovered August 9, 2016 Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability due to a use-after-free error. Specifically, this issue occur within the ‘CAnchor’ object. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue […]

Risk High Date Discovered August 9, 2016 Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 […]

New Gmail Alerts Warn of Unauthenticated Senders
Why Anonymous Should Spy on ISIS Forums Rather than DDoSing Them
Mr. Robot eps2.4m4ster-s1ave.aes – the security review
Couple sue over IP glitch that repeatedly sent Feds to their house
Thieves can wirelessly unlock up to 100 million Volkswagens, each at the press of a button
Microsoft Mistakenly Leaks Secure Boot Key
Bluetooth Hack Leaves Many Smart Locks, IoT Devices Vulnerable
Feds move to stop social media mockery of nursing home residents
Google Says ‘a bug’ removed West Bank and Gaza from the map
Imperva under pressure to find buyer after disappointing results
A new $500,000 iOS bug bounty beats Apple’s offer
Found an iOS zero-day? This firm will pay you $300,000 more than Apple
Want secure code? Give devs the right tools
Secure Boot proves insecurity of backdoors
Developers need secure coding environments
Facebook starts bypassing adblockers
QuadRooter vulnerabilities leaves 900 million Android devices at risk of attack

Over 900 million Android smartphones and tablets are vulnerable to cyberattacks, as they contain a set of four vulnerabilities dubbed QuadRooter. These flaws were found in devices that use Qualcomm chipsets, Check Point revealed at this year’s DEF CON 24 Hacking Conference in Las Vegas. It stated that if any of the four vulnerabilities are […]

Hilton hotels’ email so much like phishing it fooled its own techies
Almost all cars sold by VW Group since 1995 at risk from unlock hack
Linux malware? That’ll never happen. Ok, just this once then
McAfee outs malware dev firm with scores of Download.com installs
Indian hacking gang goes on three-year Chinese phishing trip
Patch vBulletin, or get popped
$200,000 for a serious iOS bug? Pfft, we’ll give you $500,000, says exploit broker Exodus

Several vulnerabilities have been found in PostgreSQL-9.4, a SQL database system. CVE-2016-5423 Karthikeyan Jambu Rajaraman discovered that nested CASE-WHEN expressions are not properly evaluated, potentially leading to a crash or allowing to disclose portions of server memory. CVE-2016-5424 Nathan Bossart discovered that special characters in database and role names are not properly handled, potentially leading […]

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Linux security backfires: Flaw lets hackers inject malware into downloads, disrupt Tor users, etc
Raucous Ruckus router ruckus roundly rumbles: Infosec bod says Wi-Fi kit is weak, biz says no

Risk High Date Discovered August 9, 2016 Description Microsoft Windows is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. Attackers can exploit this issue to spoof and impersonate a legitimate user. Other attacks are also possible. Recommendations Deploy network intrusion detection systems to monitor network traffic for malicious activity. Deploy […]

Risk High Date Discovered August 9, 2016 Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. […]

vBulletin Patches Serious Flaw in Forum Software
Get Ready for More Ads on Facebook and Ad Blockers Won’t Matter
Juniper Hotfixes Shut Down IPv6 DDoS Vulnerability

Risk Level: Very Low. Type: Trojan.

Discovered: August 8, 2016 Updated: August 8, 2016 1:14:14 PM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Antivirus Protection Dates Initial Rapid Release version August 8, 2016 revision 007 Latest Rapid Release version […]

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Risk Level: Very Low. Type: Trojan.

Serious TCP Bug in Linux Systems Allows Traffic Hijacking
Facebook’s favorite hacker is back – with an ironic security hole
Teen hacker flies to Black Hat on his one million free airmiles
Flip Feng Shui attack on cloud VMs exploits hardware weaknesses
Instagram hackers add porn links and snaps to pwned accounts
Microsoft rushes to fix issue that unlocks devices protected by Secure Boot
5 critical holes fixed in Microsoft’s August 2016 updates – patch now!
Dota2 Forum Hacked; 1,923,972 Million User Data Stolen
Putting Apple Bug Bounty Rewards in Perspective
Faceless recognition can identify you, even when your face is hidden
Hitler ‘ransomware’ offers to sell you back access to your files – but just deletes them
Windows 10 Attack Surface Grows with Linux Support in Anniversary Update
Instagram accounts hacked, altered to promote adult dating spam
Scammers are hacking Instagram accounts and altering profiles with sexually suggestive imagery to lure users to adult dating and porn spam. Read More
Old Facebook scam gets ready for new boost

ESET researchers are warning about Facebook hoax scams that spread fake terror news to trick victims into disclosing their Facebook credentials. For example, Facebook users in the Czech Republic were targeted with a fake news report on a “deadly attack in Prague”. Soon after the Facebook scam was publicly disclosed in Czech mainstream media, the […]

Smart sex toy is oh so dumb when it comes to security
DEF CON 24: US government retains dozens, not thousands, of zero-days
Vulnerability Exposes 900M Android Devices-and Fixing Them Won’t Be Easy
Black Hat and DEF CON: The song remains the same
Speaking in Tech: Nope, sorry waiter. I won’t pay with that card reader
Microsoft’s cloud-based operations manager tackles security
Microsoft says patch your Windows PCs now against critical security vulnerabilities
Bungling Microsoft singlehandedly proves that golden backdoor keys are a terrible idea
Funny story, this. UK.gov’s ‘open banking app revolution’. Security experts not a fan of it
Apple says banks can’t touch iPhone NFC without harming security
Samsung: Hackers can’t pwn our NFC payment kit. No way, nuh-uh, not true (Well, OK, maybe)
Torrentz.eu Clone Emerges online as Torrentz2.eu
Web pages, Word docs, PDF files, fonts – behold your latest keys to infecting Windows PCs

Tobias Stoeckmann discovered that cache files are insufficiently validated in fontconfig, a generic font configuration library. An attacker can trigger arbitrary free() calls, which in turn allows double free attacks and therefore arbitrary code execution. In combination with setuid binaries using crafted cache files, this could allow privilege escalation. For the stable distribution (jessie), this […]

Oracle’s Point-of-service Division MICROS Suffers Massive Data Breach
Good news: Teen hacker gets 1-million-air-miles bug bounty reward. Bad news: It’s United
Your Monitor is not safe; Hackers could use it to spy on you
Windows PDF Library Flaw Puts Edge Users at Risk for RCE
Google Chrome will beat Flash to death with a shovel: Why… won’t… you… just… die!
Cat-themed mobile ransomware steals SMS messages, encrypts files
Project Sauron stands on the shoulders of past state-sponsored malware

Red Hat: 2016:1582-01: nodejs010-nodejs-minimatch: Moderate Advisory Posted by Anthony Pell    An update for nodejs010-nodejs-minimatch is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: nodejs010-nodejs-minimatch security update Advisory ID: RHSA-2016:1582-01 Product: Red Hat Software Collections […]

Red Hat: 2016:1583-01: rh-nodejs4-nodejs-minimatch: Moderate Advisory Posted by Anthony Pell    An update for rh-nodejs4-nodejs-minimatch is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-nodejs4-nodejs-minimatch security update Advisory ID: RHSA-2016:1583-01 Product: Red Hat Software Collections […]

Red Hat: 2016:1581-01: kernel: Important Advisory Posted by Anthony Pell    An update for kernel is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2016:1581-01 Product: […]

Red Hat: 2016:1580-01: chromium-browser: Important Advisory Posted by Anthony Pell    An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: chromium-browser security update Advisory ID: RHSA-2016:1580-01 Product: Red Hat […]

Debian: 3645-1: chromium-browser: Summary Posted by Anthony Pell    Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3645-1 security@debian.org https://www.debian.org/security/ Michael Gilbert August 09, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : chromium-browser CVE ID : CVE-2016-5139 CVE-2016-5140 CVE-2016-5141 CVE-2016-5142 CVE-2016-5143 CVE-2016-5144 Several vulnerabilites have been discovered in the chromium web browser. CVE-2016-5139 GiWan Go discovered a […]

Debian: 3644-1: fontconfig: Summary Posted by Anthony Pell    Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3644-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 08, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : fontconfig CVE ID : CVE-2016-5384 Debian Bug : 833570 Tobias Stoeckmann discovered that cache files are insufficiently validated in fontconfig, a generic font configuration library. […]

Slackware: 2016-219-03: openssh: Security Update Posted by Anthony Pell    New openssh packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…] [slackware-security] openssh (SSA:2016-219-03) New openssh packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are […]

Slackware: 2016-219-01: curl: Security Update Posted by Anthony Pell    New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…] [slackware-security] curl (SSA:2016-219-01) New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are […]

Slackware: 2016-219-02: mozilla-firefox: Security Update Posted by Anthony Pell    New mozilla-firefox packages are available for Slackware 14.1 and 14.2 to fix security issues. [More Info…] [slackware-security] mozilla-firefox (SSA:2016-219-02) New mozilla-firefox packages are available for Slackware 14.1 and 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +————————–+ patches/packages/mozilla-firefox-45.3.0esr-i586-1_slack14.2.txz: Upgraded. […]

Slackware: 2016-219-04: stunnel: Security Update Posted by Anthony Pell    New stunnel packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. [More Info…] [slackware-security] stunnel (SSA:2016-219-04) New stunnel packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are […]

Debian: 3643-1: kde4libs: Summary Posted by Anthony Pell    Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3643-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 06, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : kde4libs CVE ID : CVE-2016-6232 Debian Bug : 832620 Andreas Cord-Landwehr discovered that kde4libs, the core libraries for all KDE 4 applications, do not properly […]

Debian: 3642-1: lighttpd: Summary Posted by Anthony Pell    Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3642-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond August 05, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : lighttpd CVE ID : CVE-2016-1000212 Debian Bug : 832571 Dominic Scheirlinck and Scott Geary of Vend reported insecure behavior in the lighttpd web server. Lighttpd […]

“900 million Androids vulnerable to Quadrooter bugs” – what you need to know
Fake QR code app gets hacker into luxury airport lounges for free
A Month Without Adobe Flash Player Patches
What your hacked account is worth on the Dark Web
Email: how secure is yours? [Survey]
Internet Minefield: Beware of fake WiFi spots in Rio stealing user data