2014
Instagram Mobile App Issue Leads to Account Hijacking Vulnerability
A critical issue on Instagram’s Android Application has been disclosed by a security researcher that could allow an attacker to hijack users’ account…
Facebook Self-XSS Scam Fools Users into Hacking Themselves
In order to infect Facebook user, the cyber crooks send a phishing message via an email or a Facebook post from one of the friends in the list of the…
Five Severe Vulnerabilities Fixed in Siemens’ SIMATIC WinCC SCADA System
Siemens has issued an update to its SIMATIC WinCC SCADA system due to five severe vulnerabilities, the company said in an advisory. Impacted products…
70 % of IoT Devices Vulnerable to Cyberattacks: HP
A new "Internet of Things Security: State of the Union" study published by HP on Tuesday reveals that 70% of the most popular Internet of Things (IoT…
Mayhem Malware is targeting Linux and FreeBSD servers
Security experts at Russian Internet company Yandex have detected a new strain of malware dubbed Mayhem which is targeting server based on Linux and …
Thousands of WordPress Sites Compromised through MailPoet Vulnerability
Around 50,000 websites have been compromised through a vulnerability in the MailPoet WordPress plugin discovered this month, according to researchers…
Warning – Zero-Day Vulnerabilities Identified in Tails Operating System
The critical zero-day security flaws has been discovered in the privacy and security dedicated Linux-based operating system “Tails” that could be use…
HTML5 Canvas Fingerprint — Widely Used Unstoppable Web Tracking Technology
From last two years, many websites and tracking softwares are utilizing the fingerprinting power of HTML5 Canvas, which is a HTML element used to dyn…
Firefox 31 — Mozilla Releases Security Updates to Tighten Browser Security
Mozilla has officially released its latest build Firefox 31 for all supported platforms, addressing 11 vulnerabilities in total, three of which are m…
Operation Emmental, a sophisticated campaign which is targeting banking industry
Trend Micro has discovered a malicious campaign named Operation Emmental, which is targeting online banking systems of financial institutions worldwi…
Funny Video Facebook Scam Drops Not so Funny Trojan
A new “funny” video spreading on Facebook drops a not so hilarious Trojan on users’ computers.
Facebook Attack Redirected Users to Notorious Exploit Kit
Facebook has removed a scam that was redirecting users to the Nuclear exploit kit, according to researchers with Symantec. The scam relied on users g…
VirusTracker - new tool for tracking the botnets
The new tool and security firm was established on czech and global market. Its aim is to track the network of botnets and creats a global database of…
DDoS Attacks evolve into sophistication
According to global DDoS attack report by Akamai’s Prolexic in 2014 the popularity of reflection and amplification attacks was on the rise. Report es…
Gyges, the mixing of commercial malware with cyber weapon code
Experts at Sentinel Labs security firm have discovered Gyges malware in the wild in March 2014, the malicious code appears very sophisticated to the …
Hidden services in iOS devices could allow users’ surveillance
Apple has worked hard to make iOS devices reasonably secure but hidden services could be exploited to steal every user’s data in a stealthy way.
Siemens Industrial Products Affected by OpenSSL Vulnerabilities
According to advisories published by both Siemens and the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT), the security holes aff…
Apache Server Vulnerability Allows Attackers to Execute Code Remotely Without Authentication
An Apache HTTP server buffer overflow vulnerability could allow attackers to execute code remotely, according to an advisory by the Zero Day Initiati…
Cyber Criminals Use Malaysia Airlines Flight MH17 Plane Crash News to Bait Users
Spammers and cybercriminals are quick to take advantage of the tragedy and started spreading malware through the social media websites, abusing the m…
Critroni, a sophisticated ransomware which uses Tor Network as C&C
A security researcher has detailed Critroni ransomware, a new sophisticated malware which is being sold in different underground forums.
A new PushDo botnet variant infected 11,000 machine in 24 hours
Security Experts at Bitdefender report that a new PushDo variant emerged from the underground compromising 11,000 machine in 24 hours.
Discovered a new Havex variant which hit SCADA via OPC
Researchers at FireEye have detected a new variant of Havex RAT, which scans SCADA network via Object linking and embedding for Process Control (OPC)…
Scammers Phishing for LinkedIn Credentials, Bitdefender Warns
Scammers have targeted business-oriented LinkedIn users with a malicious invitation email meant to steal their sensitive authentication details, acco…
vBulletin Fixes SQL Injection Vulnerability That Exposes Website Databases
Software developer vBulletin announced on Wednesday that it had released a patch to address a serious SQL injection vulnerability affecting the its f…
Researchers Analyze Multipurpose Malware Targeting Linux/Unix Web Servers
An in-depth analysis of a recently discovered piece of malware that's designed to target Linux and Unix Web servers has been published on Thursday by…
Critical vulnerabilities in numerous ASUS routers
According to a report by security expert Kyle Lovett on the Bugtraq mailing list, critical security vulnerabilities exist in numerous ASUS routers an…
Researchers from Abuse.ch launches SSL Blacklist
The Swiss security activists behind Abuse.ch, has started new project: the SSL Blacklist. The goal of SSLBL is to provide a list of bad SHA1 fingerpr…
Oracle delivers 113 updates
Oracle's Quarterly Critical Patch Update (CPU) is never a minor event. In April 104 security issues were introduced, in January it was 144. This time…
Gmail App for iOS vulnerable to Man-in-the-Middle Attacks
Google Gmail application for iOS is exposed to risks of Man-in-the-Middle (MitM) attacks which allow bad actors to monitor encrypted email communica…
Source code of Tinba banking malware leaked
The source code for Tinba banking trojan, aka Tinybanker, has been leaked in the cybercrime ecosystem, the malware is recognized as the smallest bank…
New Contraception Wi-Fi Chip Raises Security Concerns
The microchip, which measures 20x20x7 milimeters, is implanted under the skin in any soft area of the body and controlled to release a birth control …
Forgotten Facebook API Allowed Cyber-Criminals to Spy on Users
A flaw in the Facebook REST API could have allowed cyber-criminals to spy on other users based on their user ID.
New Trojan Used in Attempt to Resurrect Gameover Zeus Botnet
Cybercriminals have developed a new Trojan largely based on Gameover Zeus in an effort to revive the botnet that was recently disrupted by internatio…
BrutPOS Botnet Compromises insecure RDP Servers at Point-of-Sale Systems
The new botnet campaign, dubbed as BrutPOS, aims to steal payment card information from the POS systems and and other places where payment data is st…
Google blocked unauthorized digital certificates issued by NIC India
Google Security experts have detected and blocked unauthorized digital certificates for a number of its domains issued by the NIC of India.
Hackers can break Tor Network Anonimity with USD 3000
Security experts Alexander Volynkin and Michael McCord will present at the next Black Hat 2014 a method to break Tor network anonymity with just USD …
Cisco warns on combined spear phishing and exploit attacks
Cisco’s Threat Research Analysis and Communications (TRAC) uncovered an extremely targeted spear phish attack on high-profit companies in Europe. Acc…
That LIFX Smart Lightbulb Hack Wasn’t Easy
If you’ve been following your Internet of Things security news, you probably read about the latest hack of a consumer-oriented ‘smart home’ device: C…
ENISA issued an annual report
European Union Agency for Network and Information Security (ENISA) issued an annual report for year 2013. Besides the overall wrap-up of their activi…
Open Source File Encryption Tool from CryptoCat Developer
The encryption program is dubbed as miniLock, which is a free and open-source browser plugin designed to let anyone encrypt and decrypt files in seco…
Critical Vulnerability and Privacy LoopHole Found in RoboForm Password Manager
Critical Vulnerability and Privacy LoopHole Found in RoboForm Password Manager.
POS Machine Vendor Warns of Possible Payment Card Breach at Restaurants
Information Systems & Suppliers (ISS) Inc., the vendor of point-of-sale (POS) electronic cash registers and security systems used by restaurants has …
Facebook SDK Vulnerability Puts Millions of Smartphone Users' Accounts at Risk
Facebook SDK for Android and iOS is the easiest way to integrate mobile apps with Facebook platform, which provides support for Login with Facebook a…
A new Android Malware called 'HijackRAT' attacks Mobile Banking Users
Cybercriminals have rolled out a new malicious Android application that wraps different varieties of banking fraud trick into a single piece of advan…
Default SSH Private Key Exposes Cisco's VoIP Manager to Remote Attack
Multiple Vulnerabilities Found in Cisco's VoIP Manager.
Bug in WordPress plugin allows unauthorized file upload
WordPress users who also use the MailPoet plugin are urged to update it as soon as possible, as all versions but the latest one are plagued with a cr…
New Banking Malware with Network Sniffer Spreading Rapidly Worldwide
Security researchers from the Anti-virus firm Trend Micro have discovered a new variant of banking malware that not only steal the users’ information…
Selfmite, the rare Android worm which spreads itself by sending SMS
Experts at AdaptiveMobile discovered a rare Android SMS worm dubbed Selfmite which spreads itself by sending SMS including a malicious link to the co…
Stuxnet-like 'Havex' Malware Strikes European SCADA Systems
Security researchers have uncovered a new Stuxnet like malware, named as “Havex”, which was used in a number of previous cyber attacks against organi…
Critical flaw in TimThumb plugin menaces the WordPress world
A critical vulnerability in the WebShot feature implemented by TimThumb plugin expose WordPress instance to Remote Code Execution attacks.