2017
Vulnerability in wireless chips in mobile phones
Team Project Zero discovered a flaw in the implementation of wireless chip made by Broadcomm, which can be exploited to run arbitrary code in the con…
Major Security Flaws Uncovered in Samsung's Tizen Operating System
Equus Software security researcher Amihai Neiderman recently uncovered several major security flaws in Samsung's Linux-based Tizen operating system, …
UEFI Vulnerabilities allow to fully compromise Gigabyte Mini PCs
Experts at Cylance disclosed two UEFI flaws that can be exploited by attackers to install a backdoor on some Gigabyte BRIX mini PCs.
Social engineering leads to ransomware for Skype users
Once again, Microsoft’s secure communication tool is used to spread malware, according to several complaints on Reddit last Wednesday. Criminals targ…
Update Your Apple Devices to iOS 10.3.1 to Avoid Being Hacked Over Wi-Fi Tuesday
Less than a week after Apple released iOS 10.3 with over 100 bug fixes and security enhancements; the company has just pushed an emergency patch upda…
Apple Patches Hundreds of Vulnerabilities Across Product Lines
Apple on Monday released security patches for its macOS and macOS Server, iOS, watchOS, tvOS, Safari, and Pages, to address over 200 vulnerabilities.
Vulnerability of some types of Cisco network switches
Cisco is warning of a new critical zero-day IOS / IOS XE vulnerability that affects more than 300 of its switch models. A vulnerability CVE-2017-3881…
End of Windows Vista support is getting closer
The date for end of support for Windows Vista is set to 11.4.2017. This day onward Microsoft will stop issuing new security patches and hotfixes. Tec…
New security patches
New security patches by Microsoft, Adobe and VMware were released yesterday. Microsoft patches 18 vulnerabilities across its products, namely Windows…
Multiple unpatched vulnerabilities discovered in Western Digital My Cloud devices
Multiple Western Digital MyCloud NAS devices are affected by several security flaws, varying in severity, that allow attackers to bypass authenticat…
Unpatched flaw in Edge, Internet Explorer browsers
Google Project Zero has disclosed an unpatched vulnerability in browsers Edge and Internet Explorer. Disclosure includes proof-of-concept code. Vulne…
Beware! Don't Fall For "Font Wasn't Found" Google Chrome Malware Scam
Next time when you accidentally or curiously land up on a website with jumbled content prompting you to download a missing font to read the blog by u…
Microsoft issues critical security patches for Adobe Flash Player
Microsoft released numerous patches late on Tuesday to fix flaws in Adobe Flash. The flaws are rated "Critical" for Windows client operating systems …
Flaws in Python and Java libraries Allow Firewall Bypass
Unpatched libraries in Java and Python allows attacers to bypass firewall in remote networks. Vulnerability can be exploited for establishing another…
SQL malware targeting online shops running on Magento hides the code in SQL database
Security experts have discovered a new strain of malware that is targeted websites raising the Magento eCommerce platform. The novelty is that this i…
Fraudulent SMS messages containing malware disguised as sent by delivery companies.
In recent days phishing SMS messages were found aimed at czech mobile users. Message contains a link to malware which is designed to work on Android …
Microsoft Windows DRM issue could be exploited to uncloak Tor Browser users
The anonymity of the Tor users is threatened by a new issue related the Microsoft’s DRM. Windows users running the Tor browser can be de-anonymized w…
SMB vulnerability affecting Microsoft Windows
US-CERT has released information on a Server Message Block (SMB) vulnerability affecting Microsoft Windows. In particular, Windows fails to properly …
Critical vulnerability in Wordpress
Wordpress released patches for vulnerabilities affecting versions 4.7 and 4.7.1. The critical bug allowed attacker to execute two vulnerabilities: Re…
Vulnerability causing continuous reboots on Samsung Galaxy S4 and S5
Combination of vulnerabilities can cause continuous reboots remotely via malicious SMS.
Newly published vulnerability can restart mobile phone via SMS…
Netgear routers are vulnerable to password bypass
Number of Netgear routers is affected by two flaws that can lead to password disclosure.
Number of Netgear routers is affected by two flaws that can l…
Apple released security patches for all of its major operating systems
Apple issued security patches for all of its major operating systems.
Apple issued security patches for all of its major operating systems – fixing v…
Oracle released Critical Patch Update fixing 270 vulnerabilities
Oracle has released its first quarterly critical patch update of the year, urging customers to immediately apply the bundle's 270 fixes to a number …
New phishing campaign targeting Google Gmail users
Security researchers have discovered a new phishing campaign targeting Gmail users, which is so convincing and highly effective that even tech-savvy …
Eight Vulnerabilities Patched in WordPress
Eight security flaws and 62 bugs have been addressed with the release of WordPress 4.7.1 on Wednesday. The latest update for the content management s…
Ansible patches 'own the farm' vulnerability
Ansible sysadmins, make with the patch-fingers because the project's just gone public with a high-severity bug.
CVE-2016-9587 is a peach: “a compromi…
Thousands of unpatched Magento shops hacked in the last two years
According to the BSI more than 6,000 online stores running eBay’s Magento platform have been hacked across the last two years.
Adobe Patches 42 Flaws in Reader, Acrobat, Flash
Adobe informed users on Tuesday that updates released for Acrobat, Reader and Flash Player patch a total of 42 vulnerabilities, including many that c…
This ransomware targets HR departments with fake job applications
Cybercriminals are posing as job applicants as part of a new campaign to infect victims in corporate human resources departments with GoldenEye ranso…
2016
Critical RCE Flaw Patched in PHPMailer
The developers of PHPMailer have patched a critical vulnerability that can be exploited by a remote attacker for arbitrary code execution, a research…
RansomFree Tool Detects Never-Seen-Before Ransomware Before It Encrypts Your Data
Boston-based cyber security firm Cybereason has released RansomFree — a real-time ransomware detection and response software that can spot most strai…
Ubuntu’s Crash Report Tool Allows Remote Code Execution
A security researcher has discovered a critical vulnerability in Ubuntu Linux operating system that would allow an attacker to remotely compromise a …
DNSChanger Malware is Back! Hijacking Routers to Target Every Connected Device
Next time when you see an advertisement of your favorite pair of shoes on any website, even if it is legitimate, just DO NOT CLICK ON IT.
…Because th…
0-Day Exploits Could Wreak Havoc on Linux Desktops
Security researcher Chris Evans this week made public a full 0-day drive-by download exploit impacting Ubuntu and Fedora and possibly other current L…
Security issues concerning Yahoo
Following a recent investigation, Yahoo identified data security issues concerning certain Yahoo user accounts. In August 2013 unauthorized third par…
Corporate Office 365 users hit phishing attack
Corporate Office 365 users hit with clever phishing attack. Corporate Office 365 users are being targeted by phishers using a clever new trick to byp…
Scammers can trick Microsoft Edge
Scammers can trick Microsoft Edge into displaying fake security warnings.
Yahoo patches critical XSS vulnerability
Yahoo patches critical XSS vulnerability that would allow hackers to read any email.The flaw let malicious codes to pass Yahoo's filtration process.
Stop Using these 2 Easily Hackable Netgear Router Models — US CERT Warns
Netgear's R7000 and R6400 routers, running current and latest versions of firmware, are vulnerable to arbitrary command injection attacks, though the…
Critical Vulnerability Patched in Roundcube Webmail
Open source webmail provider Roundcube has released an update that addresses a critical vulnerability in all default configurations that could allow …
Locky Variant Osiris Distributed via Excel Documents
The infamous Locky ransomware has once again switched to a new extension to append to encrypted files, but reverted to malicious Office documents for…
Backdoor Found in Many Sony Security Cameras
Sony has released firmware updates for many of its security cameras to address a critical vulnerability that can be exploited to take control of the …
Researchers Bypass Apple's Activation Lock on iPhones and iPads
Two researchers have found a way to bypass the Apple Activation Lock on both iPhones and iPads, running the two most recent versions of iOS, 10.1 and…
New SmsSecurity Variant Roots Phones, Abuses Accessibility Features and TeamViewer
In January of 2016, we found various “SmsSecurity” mobile apps that claimed to be from various banks. These apps supposedly generated one-time passwo…
Google Promotes Chrome 55 Browser to Stable Channel, 36 Security Issues Patched
On the first day of December, Gooogle decided that it was time for the popular Chrome web browser to get a new release, so it promoted Chrome 55 to t…
More Than 1 Million Google Accounts Breached by Gooligan
As a result of a lot of hard work done by our security research teams, we revealed today a new and alarming malware campaign. The attack campaign, na…
TeleCrypt Ransomware's Encryption Cracked
TeleCrypt, the file encryption ransomware that abuses Telegram API for communication, has had its encryption cracked just two weeks after the threat …
Several DoS Vulnerabilities Patched in NTP
The CERT Coordination Center and the Network Time Foundation announced on Monday the availability of NTP 4.2.8p9, which includes nearly 40 security p…
Spammers using Facebook Messenger to Spread Locky Ransomware
If you came across any Facebook Message with an image file (exactly .SVG file format) send by any of your Facebook friends, just avoid clicking it.
A…
Firefox 50 Patches 27 Vulnerabilities
Mozilla this week released Firefox 50 in the stable channel to patch 27 vulnerabilities and to provide users with improved Download Protection.