2015
Malicious Gaming App Infects More than 1 Million Android Users
Threat researchers from security firm ESET have discovered a malicious Facebook-Credentials-Stealing Trojan masquerading as an Android game that has …
OpenSSL fixes Alternative chains certificate forgery flaw
OpenSSL Foundation fixed a critical issue that impacts any application that uses the popular crypto library in the authentication processes.
Sophos discovered new tricks to poison Google Search engine
Hackers are using a new search engine poisoning method to circumvent Google’s page ranking-algorithms, the technique relies on PDF documents.
Google to Fix Address Spoofing Bug in Chrome
After nearly a month of debate, Google Chrome developers have decided that a potential security flaw that can be exploited to spoof the URL displayed…
Zero-Day Flash Player Exploit Disclosed in 'Hacking Team' Data Dump
The Recent Cyber Attack that exposed 400GB of corporate data belonging to surveillance software firm Hacking Team has revealed that the spyware compa…
A number of vulnerabilities affect IP Enabled AirLive Cameras
A number of AirLive Cameras are affected by command injection vulnerabilities that could allow attackers to decode user credentials and control the d…
OpenSSL to Patch Undisclosed High Severity Vulnerability this Thursday
Attention Please! System Administrator and anyone relying on OpenSSL should be prepared to switch to a new version of the open-source crypto library …
Malicious Version of BatteryBot Pro App Found on Google Play
Security researchers have come across a fake version of the popular BatteryBot Pro application for Android devices. The rogue app is designed to cond…
Mozilla Patches Critical Vulnerabilities With Release of Firefox 39
Firefox 39 was released on Thursday, and the latest version of Mozilla’s web browser addresses two-dozen vulnerabilities, including several issues th…
Flaw in 802.11n Standard Exposes Wireless Networks to Attacks: Researchers
A vulnerability in the 802.11n wireless networking standard can be exploited by a remote attacker to target wireless networks, researchers have warne…
Crooks Use Hacked Routers to Aid Cyberheists
Researchers at the Fujitsu Security Operations Center spotted a strain of Dyre being served exploiting hundreds of compromised home routers.
Hackers Exploit Zero-Day Magento Vulnerability to Steal Your Credit Cards
Hackers are increasingly exploiting an unknown flaw to siphon payment card information from e-commerce websites that use Magento, the most popular e-…
Cisco Issues Patches for Multiple Default SSH Keys Vulnerabilities
Cisco has released patches for SSH keys vulnerabilities affecting several of its virtual appliances.
The vulnerabilities were discovered during inter…
How we let a router get “cracked”
In the previous two blog posts about project Turris, we described how a telnet “minipot” helped us to uncover a possible botnet consisting mainly of …
Emergency Patch for Adobe Flash Zero-Day
Adobe Systems Inc. today released an emergency update to fix a dangerous security hole in its widely-installed Flash Player browser plugin. The compa…
Serious Zero-Day Security Flaw in iOS and OS X Could Lead to Password Theft
Researchers from Indiana University, Peking University, and Georgia Institute of Technology, joined forces to uncover the serious security issue, whi…
Drupal Core - Critical - Multiple Vulnerabilities
Drupal has released updates to address multiple vulnerabilities. Exploitation of one of these vulnerabilities could allow a remote attacker to gain a…
Last Pass Hacked, Users Urged to Change Master Passwords
Lass Pass suffered a network intrusion on Friday and is advising users to change their master password to avoid being hacked.
Samsung Galaxy phones at risk from massive security flaw
Security researchers have gone public with details of a security flaw that, they say, could impact over 600 million Samsung mobile devices worldwide …
Massive Malvertising Campaign Hits Users with Angler Exploit Kit
Researchers with Raytheon|Websense have identified a massive malvertising campaign that has hit Web users in Europe and the U.S.
The attack is focuse…
Microsoft Releases Critical Security Updates for Internet Explorer, Windows
Microsoft released eight security bulletins today as part of this month's Patch Tuesday, including two critical updates for Windows and Internet Expl…
Serious Vulnerabilities Patched in CUPS Printing Service
CUPS has been updated to address a couple of security bugs that can be exploited by a malicious actor to elevate privileges and execute arbitrary cod…
Facebook – now with added PGP encrypted notification emails to boost your security
In a blog post, Facebook’s security team has explained that from now on, when the social networking site sends you sensitive emails such as password …
Alleged Author of Locker Ransomware Publishes Decryption Keys
An individual claiming to be the developer of the crypto ransomware known as Locker has published the private keys needed to recover the files taken …
And last, but not least: D-link strikes again.
There were 50+ new security flaws found in firmware of D-link NASes and NVRs. As usually, only option for „lucky“ owners of these devices is waiting…
Vulnerability found in OpenSSL
There are dozens of vulnerable Linux and Unix distros. Fortunately updated packages are publicly available.
Want to stalk your facebook friends ?
Good news: it is possible (using linked howto)
Bad new: They can stalk you as well. (Only if you are happy user of Facebook messenger, of course).
Spampionship 2015
SophosLabs prepared 'dirty dozen' of spam sending countries according to the volume of sent spam and the population. They used the spam traps to coll…
Malicious Minecraft apps affect 600,000 Android Users
So you love Minecraft? You might want to be very careful before downloading the cheats for the popular Minecraft game from Google Play Store.
NitlovePoS, The New PoS Malware is being spread by Spam
Researchers at FireEye have detected a new strain of point-of-sale (POS) malware being used in the wild and served through a spam campaign,
New Linux-Based Router Worm Used in Social Network Scheme
Researchers at ESET are shining the light on a new piece of malware compromising routers in a scheme to take fraudulent actions on social networks.
Botnet from compromised routers
In the next release of Turris OS, we would like to give our users the possibility to play a more active part in detection of network attacks. The fir…
Cybercriminals Use SVG Files to Distribute Ransomware
Researchers at email and web security company AppRiver spotted a campaign in which malicious actors attempted to distribute a piece of ransomware wit…
Malicious version of PuTTY is spreading in the wild
Bad actors have released a malicious version of the popular open source tool PuTTY to steal access credentials of computers worldwide.
Ransomware Removal Kit available online for free
A security researcher has compiled the Ransomware Removal kit that could be used in the process of responding to ransomware infections.
Google Patches 37 Security Bugs With Release of Chrome 43
Google announced on Tuesday that Chrome 43 is available for download. The latest release contains numerous improvements and fixes, including patches …
Logjam TLS Vulnerability Exposes Websites, Mail Servers: Researchers
The vulnerability, dubbed “Logjam,” affects the Transport Layer Security (TLS) protocol and it can be exploited through man-in-the-middle (MitM) atta…
Millions of Routers open to attack due to a NetUSB flaw
A simple vulnerability has been uncovered in the NetUSB component, millions of modern routers and other IoT devices are exposed to the risk of cyber …
Address spoofing vulnerability in Safari Web Browser
A new vulnerability arised in Safari Web Browser that can lead to an address spoofing allowing attackers to show any URL address while loading a diff…
Oracle Issues VENOM Security Updates
Oracle has released updates for its products to address the VENOM vulnerability impacting virtual environments.
Tails 1.4 is out to preserve your privacy and anonymity
The Debian-based distribution Tails, “The Amnesiac Incognito Live System,”version 1.4 is available online! Tails is a popular live operating system (…
Hackers drain money from Starbucks accounts linked to users’ credit cards
Hackers steal money from Starbucks mobile customers using linked credit cards, nearly 16 million customers who use the company app are at risk.
Adobe issued a significant update for Flash Player, Reader and Acrobat
Adobe issued an update to fix 52 flaws in Flash Player, Reader and Acrobat products, that fortunately aren’t being publicly exploited in the wild.
MacKeeper Zero Day Remote Code Execution Vulnerability
The vulnerability details were disclosed on Friday after the patch release, which allows an attacker to execute remotely malicious commands with root…
Lenovo Patches Critical 'System Update' Vulnerabilities
Lenovo has patched critical flaws in its computers that allow an attacker to compromise the System Update service.
Apple Updates Safari to Patch Several Vulnerabilities
Updates released by Apple on Wednesday for the Safari web browser address several security holes, including ones that could lead to arbitrary code ex…
Attackers Actively Exploiting Flaw That Exposes Millions of WordPress Sites
Malicious actors are actively exploiting a DOM-based cross-site scripting (XSS) vulnerability that could potentially affect a large number of WordPre…
What does The Honeynet Project do and what is our connection to it
The Honeynet Project is a nonprofit organization established by Lance Spitzner, which brings together researchers and programmers from around the wor…
Mumblehard Malware Targets Linux and FreeBSD Servers
Thousands of computers and web servers running Linux and FreeBSD operating systems have been infected over past five years with sophisticated malware…
Tor Browser 4.5 released! It comes with many improvements
Tor Browser 4.5 released! It comes with many improvements for security, privacy and usability. Download it to protect your online privacy.