2014
Mozilla left thousands of email addresses and passwords lying around (again)
For second time in a month, Mozilla has had to warn that thousands of email addresses and passwords were left lying around on a server that the publi…
PCI Security Standards Council Urges Retailers Take Action Against Point-of-Sale Malware
The Payment Card Industry (PCI) Security Standards Council is encouraging retailers to take steps to better protect themselves from the Backoff point…
An automated DDoS reflection attack tool used in the wild
A group of hackers dubbed DERP has created a super tool to coordinate multi protocol DDoS reflection attacks as explained by Melbourne-based Micron21…
Microsoft Re-Releases Windows Security Update Pulled After Complaints
Microsoft has fixed and reissued a patch released earlier this month that left some users with the infamous 'Blue Screen of Death.'
Java.com, Other High-Profile Sites Hit by Malvertising Attack
The websites themselves have not been compromised, but some of the ads they had displayed between August 19 and August 22 were designed to redirect v…
Google Patches 50 Security Vulnerabilities in Chrome Browser Update
Google has plugged 50 security vulnerabilities in the latest update to the Chrome browser.
Easily Exploitable Vulnerability Found in Netis Routers
A remote attacker that knows the targeted router's external IP address can gain access to it through the UDP port 53413. In order to get to the actua…
A new Side channel attack-how to steal encryption keys by touching PCs
Researchers demonstrated a new side channel attack which allow them to steal encryption keys by simply touching a laptop.
Hacking Gmail App with 92 Percent Success Rate
A group of security researchers has successfully discovered a method to hack into six out of seven popular Smartphone apps, including Gmail across al…
Remote Attack Could Damage Your Pebble Smartwatch Easily
Pebble, a wristwatch that can connect to your phone - both iOS and Android - and interact with apps, has a hard-coded vulnerability that allows a rem…
Most popular Android apps open users to MITM attacks
An analysis of the 1,000 most popular free Android apps from the Google Play store has revealed a depressing fact: most of them sport an SSL/TLS vuln…
Hacking traffic light systems, it’s so easy
A new study conducted by security researchers at the University of Michigan demonstrated that it is easy to hack traffic light systems.
Facebook Server Leveraged for DDoS Attack
The way in which images attached to Facebook posts are refreshed can be abused to conduct distributed denial-of-service (DDoS) attacks using the site…
Windows Registry Forensics using ‘RegRipper’ Command-Line on Linux
RegRipper is a flexible open source tool that can facilitate registry analysis with ease. It contains pre-written Perl scripts for the purpose of fet…
Graphic Library Flaw Exposes Apps Created With Delphi, C++ Builder
Researchers at Core Security say they have identified a security vulnerability in the Visual Component Library (VLC) that affects apps developed with…
Vulnerability in WordPress Mobile Pack Exposes Password-Protected Posts
Researchers at dxw Security have discovered a flaw in the WordPress Mobile Pack plugin that can be exploited to access password-protected posts.
Web Server Attack Investigation - Installing a Bot and Reverse Shell via a PHP Vulnerability
With Windows malware getting so much attention nowadays, it's easy to forget that attackers also target other OS platforms. Let's take a look at a re…
Microsoft Says to Uninstall August Patch Updates, Causing 'Blue Screen of Death'
Microsoft on Friday quietly urged its users to uninstall the most recent round of security updates, after reports emerged that it crippled their comp…
Four-Year Old Flaw Exploited by Stuxnet Still Targeted
It was 2010 when the Stuxnet malware first appeared in the public consciousness. Though the years have passed however, there is no shortage of machin…
2.1M Solen Credit Card Numbers Found on Russian Hacker's Laptopt
Roman Valerevich Seleznev, a Russian national accused by United States authorities of operating several carding forums and hacking into point of sale…
PHP 5.3.29 is available, PHP 5.3 reaching end of life
The PHP development team announces the immediate availability of PHP 5.3.29. This release marks the end of life of the PHP 5.3 series. Future release…
Sick Facebook Scammers Exploit Robin Williams' Suicide
Scammers spare no incident to target as many victims as possible, and this time they are exploiting the tragic death of comic actor Robin Williams by…
Tech Insight: Hacking The Nest Thermostat
The three researchers demonstrated the ease with which a Nest thermostat can be compromised if an attacker has physical access to the device. In less…
Bypassing Security Defenses: DEF CON
In an attacker's ideal world, he or she would infect a desktop, steal the user's RDP password and move smoothly across the network to the RDP server …
Replica of the Tor website used to serve malware
A security researcher discovered the Torbundlebrowser.org,web site that is a replica of Tor Project site, but it is used to serve a malware.
New Bugat Malware Uses HTML Injections Taken From Gameover Zeus
Researchers have uncovered a new variant of the Bugat banking Trojan which uses HTML injection techniques that are very similar to the ones used by G…
Google Bolsters Safe Browsing Service With New Alert for Suspicious Software
Google is bolstering its Safe Browsing service with a new alert for potentially unwanted programs.
Google Maps Has Been Tracking Your Every Move, And There’s A Website To Prove It
Remember that scene in Minority Report, where Tom Cruise is on the run from the law, but is unable to avoid detection because everywhere he goes ther…
Adobe Releases Critical Security Updates for Flash Player, Acrobat and Adobe Reader
Adobe has released security updates to fix seven vulnerabilities in its Flash and Air platforms and one in its Reader and Acrobat which, according to…
AdThief malware infected jailbroken Apple devices
More than 75,000 jailbroken iPhones have been infected by a Chinese malware which were used by cyber criminals to hijack nearly 22 million advertisem…
New Viral Video Scam on Facebook: ‘Girl Killed by Husband for Kissing Another Man’
A new viral video scam has lured thousands of Facebook users with a fake tape of a girl killed by her husband because she kissed another man, accordi…
Android Trojan Krysanec Comes Disguised as Legitimate Apps
Researchers at ESET have uncovered a new remote access Trojan (RAT) for Android that has been masked by cybercriminals as various popular application…
BlackBerry Patches Authentication Bypass, Information Disclosure Vulnerabilities
BlackBerry released patches Tuesday to plug a pair of security vulnerabilities.
The 10 most terrifying security nightmares revealed at the Black Hat and Def Con hacker conferences
Hacked planes. Unstoppable, utterly malicious flash drives. Hotel automation gone crazy. These are the 10 most terrifying security stories out of the…
F-Secure discovered Xiaomi handset spying on users’data
Experts at F-Secure security firm analyzing the new Xiaomi RedMi 1S discovered that it sends out to a server located in China a lot of user’s data.
Complete application ownage via Multi-POST XSRF
We had determined that the primary threat would be for a user to escalate privileges and access information from other accounts. In order to achieve …
Warning — Facebook Color Changer App is Just a Scam, Infects 10000 Users
The malicious app promises users to change the characteristic blue colour of Facebook’s header and interface to one of nine other colours including p…
Researcher Uncovers Vulnerability Oracle Data Redaction Security Feature
Data Redaction is one of the new Advanced Security features introduced in Oracle Database 12c. The service is designed to allow administrators to aut…
Attacks on ISP Networks allows to steal $83,000 from Bitcoin Mining pools
The researchers uncovered the theft of Bitcoin made with the use of bogus Border Gateway Protocol (BGP) broadcasts to hijack networks of at least 19 …
Critical Vulnerability Found in Popular WordPress Contact Form Plugin
A critical, remotely exploitable vulnerability has been found in a popular WordPress plugin that allows users to easily customize every aspect of the…
Free CryptoLocker Ransomware Decryption Tool Released
Thanks to security experts, who created an online service where victims whose systems have been encrypted by the CryptoLocker ransomware can get the …
WordPress and Drupal websites Vulnerable to DoS attack which can make them completely inaccessible
If your website is based a WordPress or Drupal CMS you need to urgently update it to the last version released due to the presence of a critical vuln…
Microsoft to Block Outdated ActiveX Controls in Internet Explorer
In an effort to provide an enhanced level of protection to Internet Explorer users, Microsoft has decided to introduce a new feature that's designed …
Critical code execution bug in Samba gives attackers superuser powers
The newly discovered bug can be exploited by sending specially manipulated traffic to a vulnerable system. The remote code execution vulnerability re…
A new Citadel trojan variant
A Citadel which derived from Zeus banking trojan has a new variant. It allows to have an control over victim's device through VNC and other remote ma…
Controlling devices with built-in management tools
Researchers from Accuvant Labs discovered vulnerabilities in built-in management tools of mobile devices. Carriers use such kind of management tools …
CZ.NIC Association introduced a new version of the educational app for children with dyslexia
At the website of the Google Play service, those interested will now also find two brand new games for practicing visual memory and attention trainin…
A Honeypot for home: Raspberry Pi
If you have an always on internet connection, having a honeypot listening to what is being sent your way is never bad idea. There's plenty of ways to…
Millions of Android devices exposed to fake ID flaw
Android devices are affected by a critical vulnerability which allows a malicious app to impersonate a trusted application inheriting its permissions…
Hackers can exploit USB devices to trigger undetectable attacks
Security experts demonstrated that USB devices can be used to compromise personal computers in a potential new type of attacks that evade all actual …