2014
ROM is the new improved strain of the Backoff PoS Malware
Security experts at Fortinet detected a new variant of Backoff malicious code dubbed ROM, which is an improved version of the popular POS malware.
New "WireLurker" Malware Targets iOS, Mac OS X Users via Trojanized Applications
Researchers at Palo Alto Networks have uncovered a new piece of malware designed to target devices running Apple's OS X and iOS operating systems, an…
Samsung Clarifies Impact of "Find My Mobile" Vulnerability
In response to recent reports that its "Find My Mobile" service is plagued by a vulnerability that can be leveraged lock and unlock devices, Samsung …
Apple OS X Yosemite is affected by a serious vulnerability
The Swedish hacker Emil Kvarnhammar at security firm Truesec discovered a privilege escalation vulnerability in the Yosemite OS X, which allows the a…
Linksys SMART WiFi EA Series Routers Vulnerable to Password Exposure
The firmware contains two severe vulnerabilities, CVE-2014-8243 and CVE-2014-8244 that, if exploited, could expose sensitive information and the admi…
Contactless Visa Cards Vulnerable to Fraudulent Foreign Currency Transactions
Researchers at Newcastle University in the United Kingdom have discovered a flaw in Visa's contactless credit cards that can be leveraged to steal la…
Facebook Adds “Onion” Address for Anonymous Browsing. But Does It?
Facebook implemented a new way for users to access its site via Tor “without losing the cryptographic protections provided by the Tor cloud” and disc…
New RAT Hijacks COM Objects for Persistence, Stealthiness
Researchers have uncovered a remote administration tool (RAT) that uses a novel technique to stay persistent on infected systems and avoid detection.
iOS App Vulnerability Exposed GroupMe Accounts
Until recently, cybercriminals could have hijacked the account of any GroupMe user simply by knowing the phone number connected to the targeted accou…
What is the Cyber Europe 2014 and why is it so important?
Which is the importance of the Cyber Europe 2014 organized by the ENISA? It is the largest and most comprehensive EU cyber-security exercise to date.
Drupal community under attack due to a critical SQL Injection flaw
A security advisory issued by Drupal assumes that every installation of the popular CMS based in the version 7.x was compromised unless patched.
CVE-2014-4877: Wget FTP Symlink Attack Vulnerability
The open-source Wget application which is most widely used on Linux and Unix systems for retrieving files from the web has found vulnerable to a crit…
The biggest european exercise takes place
Operational phase of Cyber Europe 2014 takes place today. Over 200 organizations and 400 cyber security specialists from cyber security are participa…
The biggest european exercise takes place
Operational phase of Cyber Europe 2014 takes place today. Over 200 organizations and 400 cyber security specialists from cyber security are participa…
Verizon Wireless Injects Identifiers to Track Mobile Customers Online Activities
The Nation's largest telecom operator 'Verizon Wireless' is tracking its customers' mobile internet traffic by adding a token to Web requests traveli…
Experts at SANS discovered a Shellshock SMTP Botnet Campaign
The experts at SANS Internet Storm Center experts discovered a a new Shellshock Botnet campaign that is targeting SMTP gateways worldwide.
Sony Xperia Smartphones send user data in China
Security experts have discovered that Sony Xperia Smartphones secretly send user Data to servers in China due to the presence of the Baidu spyware.
ASUS Wireless Routers RT Series Vulnerable to Man-in-the-Middle Attacks
The ASUS wireless routers from the RT-series have been found vulnerable to a Man-in-the-Middle attack, as they download updates via HTTP without an e…
Google Details New Security Features in Android 5.0 Lollipop
The latest version of Google's Android operating system comes with some interesting new functionality features, but the company says it's also much m…
BlackEnergy Malware Compromises US SCADA Systems; US CERT Says
The BlackEnergy malware toolkit has been compromising US SCADA (Supervisory Control and Data Acquisition) systems in a sophisticated campaign, accord…
NIST warns on Zero-Day flaw in Samsung FindMyMobile
The National Institute of Standards and Technology is warning of the presence of a Zero-Day flaw in the Samsung FindMyMobile service.
RRVS, Facebook and Yahoo work to prevent identity theft
Facebook and Yahoo have designed an SMTP extension dubbed RRVS, Require-Recipient-Valid-Since, to prevent illegal use of emails with a new ownership…
Tor Exit Node Found Maliciously Modifying Files
A researcher has identified an exit node on the Tor anonymity network which is set up to maliciously modify the files that go through it. Another inf…
Koler Android Ransomware Learns to Spread via SMS
Users of Android operating system are warned of a new variant of Android malware Koler that spreads itself via text message and holds the victim’s in…
NAT-PMP Protocol Vulnerability affects more than 1.2 Million SOHO devices
Security researchers at Rapid7 have discovered a serious NAT-PMP Protocol vulnerability that puts 1.2 Million SOHO routers at risk.
New Facebook App Encourages Anonymous Sharing
Facebook’s new mobile app, Rooms, allows people to create groups and share their interests under pseudonyms, Facebook announced.
Cisco Fixes 3-Year-Old Vulnerability Affecting Security Appliances
Cisco has released software updates to address a three-year-old vulnerability in the Telnet code of Cisco AsyncOS, the operating systems used in some…
Microsoft PowerPoint Vulnerable to Zero-Day Attack
Microsoft has issued a temporary security fix for the flaw and also confirmed that the zero-day flaw is being actively exploited by the hackers throu…
Drigo spyware exploits Google Drive in targeted attacks
Security experts at TrendMicro have discovered a cyber espionage campaign which used a malware dubbed Drigo to syphon data through Google Drive.
Hackers have violated ticketing system based on NFC in Chile
Unknowns have hacked the NFC based electronic payment system used in Chile, the “Tarjeta BIP!”, spreading an Android hack that allows users to re-cha…
1.2 Million Networking Devices Vulnerable Due to NAT-PMP Issues
Researchers have found that a large number of networking devices are vulnerable to cyberattacks because of poor implementation or configuration of th…
Recently Patched Flash Player Vulnerability Added to Exploit Kit
An exploit for a Flash Player vulnerability that was patched just over one week ago by Adobe has already been added by cybercriminals to an exploit k…
Ebola Phishing Scams and Malware Campaigns
US-CERT reminds users to protect against email scams and cyber campaigns using the Ebola virus disease (EVD) as a theme. Phishing emails may contain …
Mac OS X 10.10 Yosemite Sends User Location and Safari Search Data to Apple
Apple's latest desktop operating system, known as Mac OS X 10.10 Yosemite, sends location and search data of users without their knowledge to Apple's…
New Scareware Campaign Tricks Users with Fake Antivirus
A new type of scareware advertisement tricks users into believing their systems are infected and need expert help to remove the malware. The malware-…
Cisco Products Vulnerable to POODLE Attacks
Cisco has been analyzing its products to determine which of them are affected by the recently disclosed Secure Sockets Layer (SSL) version 3 protocol…
Same Origin Method Execution (SOME)
Security researcher Ben Hayak presented a new attack (SOME),which could be use to perform unintended actions on a website on behalf of victims
Privacy Tools — Tor Browser 4.0 and Tails 1.2 Update Released
Tor - Privacy oriented encrypted anonymizing service, has announced the launch of its next version of Tor Browser Bundle, Tor version 4.0, which disa…
Malvertising campaigns hit US military industry to steal secrets and intellectual property
A new wave of malvertising attacks finalized to cyber espionage is targeting military contractors to military secrets and intellectual property.
‘Anonymous’ Users of Whisper Sharing App Tracked by IP Geolocation and GPS
Users of Whisper sharing app that are supposed to be anonymous have had their posts located by IP Geolocation or GPS, according to The Guardian.
31 Security Tips for a Safe October
We would like to point out a list of 31 handy security tips you should follow this month and every day of your digital life. You probably know some o…
Researchers Hide Android Applications in Image Files
Researchers have found a way to trick Android users into executing potentially malicious applications by hiding them inside innocent-looking image fi…
Reflected File Download A New Web Attack Vector
Presentation from BlackHat about previously announced Reflected File Download attack is available here.
How to gain control of any Addthis user account
The security expert Federico Fazzi has disclosed a serious vulnerability in the Addthis.com service that allows attackers to take control of any acco…
Attackers Abuse UPnP Devices in DDoS Attacks, Akamai Warns
Researchers at Akamai Technologies have issued a warning about a spate of distributed denial-of-service attacks being launched via Universal Plug and…
Drupal Patches 'Highly Critical' SQL Injection Vulnerability
A critical SQL injection bug has been patched in Drupal, and users are being advised to upgrade as soon as possible.
POODLE attack on SSL menaces Internet, it’s time to disable it by default
The POODLE against SSL 3.0. A new attack on SSL is threatening the Internet again, it allows bad actors to decrypt traffic over secure channels.
CyanogenMod-Powered Users Susceptible to Man-in-the-Middle Attacks
Android users running the popular CyanogenMod third-party ROM could fall victim to Man-in-the-Middle (MitM) attacks, apparently possible because of t…
7 million DropBox credentials apparently leaked
Hundreds of Dropbox Passwords allegedly Leaked were publisehd online, but the company reassures its users confirming that its systems were not violat…
Reflected File Download: New Attack Vector Enables File Downloads Without Upload
In most Web attacks, malware is downloaded to victims' machines from a malicious or a compromised server. However, a researcher has uncovered a new a…