2015
Android Malware Possibly Infects 1 Million Devices via Google Play
A new malicious Android application has been discovered in Google Play, disguised as a game application called BrainTest, which could potentially hav…
Adobe Releases 23 Security Updates for Flash Player
Adobe has released an important security bulletin that addresses a total of 23 Critical vulnerabilities in Adobe Flash Player. The security fixes for…
Firefox 41 includes critical security updates
Mozilla released Firefox 41.. This latest version comes with includes four critical, five high, nine moderate and one minor security update.
Facebook Scam: Get Facebook Dislike Button
Facebook users are being targeted in a new scam that takes advantage of the recent widely publicized announcement by Facebook CEO Mark Zuckerberg tha…
Malvertising campaign targeted the Forbes Website, million users at risks
Security researchers at FireEye have uncovered a new malvertising campaign that exploited the popular Forbes.com news website.
Access Private Photos and Contacts Without a Passcode on iOS 9 devices
A hacker has found a way to access images and contacts stored on Apple iOS 9 devices even if they are protected with a passcode or Touch ID.
Warning! Popular Apple Store Apps Infected with Data-Theft Malware
A total of 39 apps, including the popular instant messaging app WeChat, Chinese Uber-like cab service Didi Kuaidi, music streaming service NetEase, p…
iOS 9 Resolves Hijacking via AirDrop Vulnerability
iOS 9, the operating system that Apple is making available for download today to its mobile device users, comes with more than new usability and func…
Synology Patches Serious Flaws in NAS Software
Network attached storage (NAS) company Synology has released updates for its Video Station and Download Station applications to patch several vulnera…
SAP Updates Patch Twenty Vulnerabilities
Germany-based enterprise software maker SAP has addressed a total of twenty vulnerabilities as part of its September 2015 Security Patch Day.
Adobe Patches Critical Vulnerabilities in Shockwave Player
Adobe has released an updated version of its popular Shockwave Player for Windows to resolve two critical vulnerabilities newly discovered in the pro…
Microsoft Patches Windows Vulnerability Exploited in the Wild
Microsoft has released a dozen security bulletins to patch more than 50 vulnerabilities affecting Windows, Internet Explorer, Edge, Office, Lync, Exc…
Warning! Seagate Wireless Hard Drives Have a Secret Backdoor for Hackers
Several of Seagate's 3rd generation Wireless Hard drives have a secret backdoor for hackers that puts users' data at risk.
A Recent study done by the…
Kaspersky Patches Critical Vulnerability in Antivirus Products
Kaspersky Lab has pushed out an update to address a serious antivirus vulnerability reported over the weekend by a Google security engineer.
How to Remove KeyRaider Malware that Hacked Over 225,000 iOS Devices
A malware named ‘KeyRaider’ has supposedly stolen user credentials of approximately 225K iPhone users. It has been given this name as it raids victim…
Using Android 'AppLock' to Protect Your Privacy? — It's Useless
Widely popular Android AppLock application by DoMobile Ltd. is claimed to be vulnerable to Hackers.
AppLock Android app enables users to apply a secu…
26 Android Phone Models Shipped with Pre-Installed Spyware
A new report claims that some rogue retailers are selling brand-new Android smartphones loaded with pre-installed software. Security firm G Data h…
Multiple Vulnerabilities in Belkin Router Could Allow DNS Spoofing and Credentials Theft
Five zero-day vulnerabilities in Belkin N600 DB Wireless Dual Band N+ routers could have allowed attackers to grab credentials in clear text and spoo…
Cisco Patches Flaw in Data Center Management Products
Cisco has released software updates to patch a remotely exploitable vulnerability affecting the company’s UCS Director and Integrated Management Cont…
Microsoft Boosts Remote Data Collection in Windows 7 and 8
Despite being criticized that it collects customer experience and diagnostic telemetry data in Windows 10, Microsoft decided months back that it woul…
10 Free or Cheap WiFi Security Testing Tools
Do not kid yourselves, security professionals. You need more than one WiFi security testing tool. Here are 10 free or inexpensive options.
Here's How Iranian Hackers Can Hack Your Gmail Accounts
Hackers are getting smarter in fooling us all, and now they are using sophisticated hacking schemes to get into your Gmail.
Yes, Iranian hackers have…
"KeyRaider" iOS Malware Targets Apple Accounts
Researchers have uncovered a new malware family designed to target devices running Apple’s iOS mobile operating system. The threat has already been u…
IBM Warns of New CoreBot Stealer
Researchers at IBM have come across a new piece of malware designed to steal sensitive information from infected computers.
Vulnerability in Pocket Addon for Firefox Could Have Affected Company Servers
A server-side vulnerability found in the save-for-later service would have allowed attackers to gain access to all user data and even populate their …
iOS Sandbox Flaw Exposes Companies Using MDM Solutions
Organizations using mobile device management (MDM) solutions are exposed to cyberattacks due to a vulnerability uncovered by researchers in the third…
Drupal Security Updates Patch Five Vulnerabilities
The developers of Drupal, the open source content management system (CMS) currently used by more than 1.1 million websites, have address several secu…
ICS-CERT warns for 0-Day vulnerabilities in SCADA systems
The ICS-CERT has recently published six security advisories to warn organizations about a number of 0-day flaws in SCADA systems.
CVE-2015-3842 – A new critical flaw threatens Android users
CVE-2015-3842 is a new flaw affecting the Android mediaserver, which can be exploited to perform attacks involving arbitrary code execution.
Microsoft Issues Emergency Patch for Critical IE Flaw Exploited in the Wild
Microsoft issued an emergency out-of-band update on Tuesday to fix a critical vulnerability (CVE-2015-2502) being actively exploited in the wild and …
SAP Security Updates Patch 22 Vulnerabilities
Germany-based enterprise software maker SAP has released patches for a total of 22 vulnerabilities as part of its August 2015 Security Patch Day.
Kali Linux 2.0 Released — Download Most Powerful Penetration Testing Platform
Offensive Security, the creators of Swiss army knife for Security researchers, Penetration testers and Hackers have finally released the much awaited…
0-Day Deserialization flaw impacts more than 55 percent Android users
Security Experts at IBM have discovered a new critical vulnerability affecting Android OS and impacting more than 55 percent users.
Microsoft, Adobe Patch Dozens of Security Vulnerabilities
Microsoft and Adobe released on Tuesday security updates to patch a large number of vulnerabilities in their products.
OpenSSH 7.0 Fixes Authentication Vulnerability, Other Security Bugs
The developers of OpenSSH announced on Tuesday the availability of version 7.0. The latest release includes new features, security and bug fixes, and…
New Firefox Zero-Day Vulnerability Nabs Local Files and Leaves No Traces
A new Firefox exploit has been reported as already being used in the wild via aware-serving websites, enabling attackers to collect sensitive local f…
Default WSUS Configuration Puts Organizations at Risk: Researchers
LAS VEGAS - BLACK HAT USA 2015 - Organizations that fail to configure Windows Server Update Services (WSUS) to use SSL are exposed to cyberattacks, r…
ICANN.org Passwords Reset Following Service Provider Breach
The Internet Corporation for Assigned Names and Numbers (ICANN) has issued another security warning after login credentials for the ICANN.org website…
Fake Windows10 upgrade contains ransomware CTB-Locker
Cybercriminals are leveraging the launch of Microsoft’s Windows 10 operating system to trick users into installing a ransomware CTB-Locker on their s…
Phishing website hosted on Google Drive
Researchers from Elastica Cloud Threat Labs discovered new phishing pages hosted on Google Drive which aims to obtain login credentials to Google acc…
Vulnerable Stagefright in Android
Vulnerability in Stagefright media player affects milions of Android devices. For exploting the vulnerability needs an attacker only phone number whe…
CSIRT tools
We have published on CZ.NIC's blog short article about the tools and applications that are used by our collegues from CSIRT teams in Slovakia, Serbia…
Milano and Detekt
Free of charge tool 'Milano' was created as an effect of Hacking team's breach. This tool should detect malware and zero-days that the team was using…
Released patch for Windows zero-day
Microsoft relased a patch for Windows zero-day that was uncovered by researchers after the breach on Italian company Hacking Team. Vulnerability was …
Epic Games forum hacked – change your online passwords, an beware of phishing
They’re the developers of popular games such as Infinity Blade, Gears of War, Unreal Tournament… and – if you’re as old as me – you might even rememb…
Oracle Patches Java Zero-Day, 192 Other Security Bugs
Oracle on Tuesday released its July 2015 Critical Patch Update (CPU). The updates address a whopping 193 security issues across multiple product fami…
Microsoft Patches Hacking Team Zero-Days, Other Vulnerabilities
Microsoft has released a total of 14 bulletins as part of the company’s July 2015 security updates. The updates address vulnerabilities in Windows, O…
Java Zero-day vulnerability exploited in the Wild
Really a bad weekend for Internet users. Three previously unknown critical zero-day vulnerabilities were revealed in Adobe’s Flash Player over the we…
VMware Patches Privilege Escalation Bug in Workstation, Player, Horizon View
VMware has released software updates for several of its products to address a vulnerability that can be exploited to elevate privileges and execute a…