2016
Hacking Apple devices with just a Message exploiting the CVE-2016-4631
This critical flaw CVE-2016-4631 resides in the ImageIO and could be exploited by a remote attacker to steal sensitive information from Apple devices…
OpenSSH affected by a user enumeration bug
By sending large passwords, a remote user can enumerate users on system that runs SSHD. This problem exists in most modern configuration due to t…
Millions of Xiaomi Smartphone vulnerable to remote hacking
Millions of Xiaomi smartphone are affected by a critical remote code execution flaw that could be exploited by hackers to take over the mobile device…
3 Popular Drupal Modules Found Vulnerable — Patch Released
Just yesterday, I wrote a warning article announcing that Drupal – the popular open source content management system – will release patches for sever…
CVE-2016-3238 Windows flaw allows to hack companies via printers
Experts consider the CVE-2016-3238 flaw the most dangerous vulnerability of the year because it is really easy to execute and have a significant impa…
Downloading Pokémon GO Game for Android? Beware! It Could be Malicious...
Security researchers have warned users that many of these online tutorials are linked to malicious versions of the Pokémon Go app that install a back…
Persistent XSS in All in One SEO Pack WordPress Plugin
A stored Cross-Site Scripting vulnerability was found in the Bot Blocker functionality of the All in One SEO Pack WordPress Plugin (1+ million active…
Hacker breached an Amazon server containing 80,000 login credentials
The hacker behind the Twitter account 0x2Taylor is claiming to have breached one of the Amazon servers containing 80,000 login credentials of Kindle …
Apache Update: TLS Certificate Authentication Bypass with HTTP/2 (CVE-2016-4979)
Apache released an important update today to fix a vulnerability that affects servers that have http/2 enabled and use TLS client certificates for au…
Critical vulnerabilities open Symantec customers to remote hack
Symantec has fixed dozens of critical vulnerabilities affecting its solutions that can be exploited by remote attackers for arbitrary code execution.
Facebook ‘Comment Tagging Malware’ Spreading via Google Chrome
Currently, a malware scam is infecting Facebook users in which they receive a notification in the app and/or in their email about a friend tagging in…
Google makes 2-Factor Authentication a lot Easier and Faster
Two-factor authentication or 2-step verification is an effective way to secure online accounts, but many users avoid enabling the feature just to sav…
WordPress 4.5.3 fixed several security vulnerabilities
WordPress has recently issued the version 4.5.3 that patches more than two dozen vulnerabilities, including 17 bugs introduced in the last three rele…
New Android malware Godless
A recently observed piece of mobile malware that leverages multiple rooting exploits targets nearly 90 percent of Android devices
A recently observed …
Cisco wireless kits are affected by a critical bug but no fix is available
A security advisory recently released by CISCO announce that three Cisco wireless kits are affected by a critical bug, but no fix is available at the…
Drupal Security Updates Patch Two Vulnerabilities
Security updates released on Wednesday for Drupal 7 and Drupal 8 patch a couple of access bypass and privilege escalation vulnerabilities.
Android Ransomware now targets your Smart TV, Too!
Do you own a Smartwatch, Smart TV, Smart fridge, or any Internet-connected smart device?
If your answer is yes, then you need to know the latest inte…
How to recover files encrypted by all Teslacrypt Ransomware variants
Experts from Cisco Talos team have improved their decryptor tool to allow the recovery of files encrypted by all the Teslacrypt Ransomware variants.
Wordpress Levo-Slideshow 2.3 - Arbitrary File Upload
An independent Vulnerability Laboratory Researcher discovered a arbitrary file upload vulnerability in the Wordpress Levo-Slideshow v2.3 plugin.
Google fixes severe security holes in Chrome browser update
Google has issued fixes for 15 severe vulnerabilities in the Chrome browser. The update, Chrome 51.0.2704.79, is for Windows, Mac and Linux systems, …
Over 10,000 WordPress sites vulnerable to exploit
Security researchers have warned that over 10,000 websites powered by the WordPress content management system (CMS) are at risk of exploit due to a p…
Tor Browser 6.0 is out with significant privacy and security improvements
The Tor Project released the Tor Browser 6.0, the last version of the popular Tor browser that brings along significant privacy and security improvem…
NTP Servers Exposed to Long-Distance Wireless Attacks
Researchers have demonstrated that remote attackers can wirelessly change the time on network time protocol (NTP) servers over long distances using i…
PayPal Users Hit with ”Account Limitation” Phishing Scam
Fresh Wave of Phish Campaign Reaches PayPal—Scammer Lure Users with “How to restore your account” Email.
Teslacrypt decryption tool allows victims to restore their files
A security researcher from ESET security firm issue a Teslacrypt decryption tool after the author closed the project and released a free master key.
The Free Internet initiative has started, support from both users and enterprises is welcome
Major Internet organizations have signed the initiative, which aims to draw attention to the consequences that will be brought by the approval of the…
Adobe Patches Flash Zero-Day Exploited in the Wild
Adobe has updated Flash Player for Windows, Mac and Linux to address a total of 25 vulnerabilities, including a zero-day that has been exploited in t…
Wi-Fi Flaw Exposes Android Devices to Attacks
A serious vulnerability affecting a Wi-Fi technology used in the Android operating system and many other products allows malicious actors to escalate…
Adobe Flash Zero-Day Under Attack
A zero-day vulnerability in Adobe’s ubiquitous Flash Player software is being exploited to launch malware attacks, the company warned in an advisory …
Czechs will pay for censorship, senators are going to raise the price of Internet access
A significant increase in Internet connection prices for end users of the Czech Republic may occur next year, if the government bill on gambling pass…
Android Trojan Steals Credit Card Info, Locks Devices Remotely
A new Android banking Trojan capable of spying on users and stealing credit card info is achieving persistency on infected devices by asking for devi…
The Internet and Technology Conference Mostly Focuses on Security Issues
Panel discussion, discussions on online safety, presentation on the impact of the lottery law on blocking the Internet or an accompanying program in …
272 Million Email Credentials Discovered in Cybercrime Forum
Researchers discovered 'a young Russian hacker' bragging in an online forum that he had acquired and was ready to give away 1.17 billion stolen crede…
Attackers Exploit Critical ImageMagick Vulnerability
Researchers have discovered several vulnerabilities in the popular image processing suite ImageMagick, including a serious remote code execution flaw…
Ransomware enters companies through RDP servers
Attackers wielding ransomware are targeting enterprises through an often-found hole in the corporate network: Internet facing, poorly secured remote …
OpenSSL Project plans to patch soon High Severity Vulnerabilities
The OpenSSL Project yesterday announced that it plans to release will release on May 3 security patches for several vulnerabilities affecting the pop…
Cyber crooks find a new and ingenious way to make hundreds of thousands of dollars with no effort
An unknown cyber gang, pretending to be Armada Collective, has made more than $100,000 in less than two months simply by threatening to launch DDoS a…
US-CERT to Windows Users: Dump Apple Quicktime
Microsoft Windows users who still have Apple Quicktime installed should ditch the program now that Apple has stopped shipping security updates for it…
Changes in Conditions of domain name registration and the mojeID service
Mid-May will bring changes to the Conditions of registration of .cz domain names and ENUM domain names as well as Conditions of the mojeID service fo…
Warning! CCTV Cameras Sold on Amazon Come with Pre-Installed Malware
Be careful while buying any off-brand electronics from Amazon, as they could end up infecting you.
Recently, independent security researcher Mike Ols…
Microsoft, Samba Patch "Badlock" Vulnerability
Updates released by Microsoft and Samba on Tuesday patch the vulnerability dubbed “Badlock,” although it turns out that the issue is not as severe as…
Experts crack Petya ransomware, enable hard drive decryption for free
Security experts have devised a method that allows users to recover data from computers infected with the Petya ransomware program without paying mon…
XSS RCE/RCI in NETGEAR SOHO routers
server firmware.re has published vulnerability of Netgear SOHO network devices enabling takeover of full controo of device. It can be done by exploit…
FRED 2.23 released
We have released a version 2.23 of FRED registry system. This version includes RDAP server and is again available for most recent versions of Fedora …
New way of office macro-based malware protection
Server The Hacker News published new way to protect users from MS Office macro-based malware. You can set MS office to be able run macros only from …
Turris Omnia Router has gained USD 1 million; the most was contributed by Czechs
The countries whose inhabitants contributed the most to this sum are the Czech Republic with more than a quarter share (28 %), followed by USA (16 %)…
Ransomware attack prevention tool from Bitdefender
Bitdefender Anti-Ransomware will prevent inbfection with known variants of Locky, CTB-Locker a Teslacrypt. Find source article here.
Google issued a new security update to fix flaws in Chrome 49
Google has issued a new security update for its Chrome 49 that patches a number of flaws, most of them discovered by external researchers.
Critical flaw in Oracle Java allows remote modification of content viewed java-enabled browser
The CVE-2016-0636 vulnerability affects Java SE running in web browsers on desktops, this means that an attacker could set up a malicious web page to…
Microsoft, Samba Preparing Patch for Severe "Badlock" Flaw
Microsoft and Samba developers are working on patching a severe vulnerability that is said to affect almost every version of Windows and Samba.