2016
Critical flaw in Oracle Java allows remote modification of content viewed java-enabled browser
The CVE-2016-0636 vulnerability affects Java SE running in web browsers on desktops, this means that an attacker could set up a malicious web page to…
Microsoft, Samba Preparing Patch for Severe "Badlock" Flaw
Microsoft and Samba developers are working on patching a severe vulnerability that is said to affect almost every version of Windows and Samba.
iOS malware successfully infects non-jailbroken devices, researchers found
Researchers have discovered a new iOS malware family that abuses design flaws in Apple’s FairPlay digital rights management (DRM) technology to infec…
95% of HTTPS servers vulnerable to trivial MITM attacks
Only 1 in 20 HTTPS servers correctly implements HTTP Strict Transport Security, a widely-supported security feature that prevents visitors making une…
Two vulnerabilities were reported in Bind9 Debian package
Vulnerabilities that can cause on Bind Server DoS were found in number of distributions:Wheezy, Jessie, Stretch and Sid. Updated packages are availab…
Cisco reports four vulnerabilities in their products
All in cathegory "High".
See following docs:
Cisco Cable Modem with Digital Voice Model DPC2203 allows unauthorized execution of arbitrary code us…
Adobe, Microsoft Push Critical Updates
Microsoft today pushed out 13 security updates to fix at least 39 separate vulnerabilities in its various Windows operating systems and software.
Google Patches Three High Risk Flaws in Chrome 49
Google on Tuesday released a security update for Chrome 49 to resolve three vulnerabilities assessed with a High risk score.
Subgraph OS — Secure Linux Operating System for Non-Technical Users
Subgraph OS is a feather weighted Linux flavor that aims to combat hacking attacks easier, even on fairly low-powered computers and laptops. Subgr…
How To Test SSLv2 DROWN Attack Vulnerability
Server The Geekstuff has published article describing how to test DROWN Attack vulnerability using short python script.
Cisco Patches Critical, High Severity Flaws in NX-OS
Cisco informed customers on Wednesday that it has released software updates for several of its products to address critical and high severity vulnera…
Apple Reissues Security Update After Blocking Ethernet on Mac OS X
Apple over the weekend reissued a security update for OS X El Capitan systems after the initial update blocked Apple’s own Ethernet drivers.
DROWN vulnerability in cryptographic protocols
New vulnerability related to SSL and TLS was released. Vulnerable are web servers, SMTP servers, IMAP and POP servers, and any other services that su…
Over 60 Vulnerabilities Patched in Apple TV
Apple has patched more than 60 vulnerabilities with the release of Apple TV 7.2.1, including flaws that can lead to arbitrary code execution, applica…
Cisco fixes Command Injection vulnerability in CISCO ACE 4710 products
Cisco has released security updates for the products CISCO ACE 4710 appliance to fix a high severity command injection vulnerability.
Dozens of american banks to replace ATMs with new ones
Dozen of banks throughout the U.S. are updating or installing new ATMs that feature a system that lets customers order the amount of cash they wish t…
Warning - Linux Mint Website Hacked and ISOs replaced with Backdoored Operating System
Are you also the one who downloaded Linux Mint on February 20th? You may have been Infected!
Linux Foundation Launches 'Zephyr', a tiny OS for Internet of Things
The Linux Foundation has broken all the barriers of compatibility issues by releasing a Real-Time Operating System (RTOS) for Internet of Things devi…
Malicious spam campaign capitalizes the global interest in the Zika virus
The cybercrime ecosystem is getting ready to exploit the media attention on the Zika virus infections for illegal activities. Be careful!
Gozi Banking Trojan Targets Windows 10's Edge Browser
A new Gozi Trojan build has been observed in the wild, modified to inject malicious code into Windows 10’s Edge browser, IBM X-Force researchers warn…
"Locky" Ransomware Encrypts Unmapped Network Shares
Security researchers have discovered a new piece of ransomware called Locky, which uses AES encryption algorithm to encrypt both local files and file…
Attackers Use Fake Patch to Hack Magento Sites
Cybercriminals are exploiting an old vulnerability in the Magento ecommerce platform to compromise online shops and steal sensitive information, usin…
Remote Code Execution Flaw Patched in glibc Library
Researchers have discovered a serious remote code execution vulnerability in the GNU C Library, also known as glibc.
Design Flaw Exposes ASUS Routers to Remote Attacks
A security researcher discovered that some SOHO routers from ASUS can be accessed from the Internet even if the WAN access feature is disabled. The v…
Here's How to Decrypt Hydracrypt & Umbrecrypt Ransomware Files
Over the last few years, we have seen several types of Ransomware malware that demand a whopping amount of money from users for the retrieval of thei…
Critical Cisco ASA IKEv1/v2 Vulnerability. Active Scanning Detected
Cisco released an advisory revealing a critical vulnerability in Cisco's ASA software. Devices are vulnerable if they are configured to terminate IKE…
Remtasu is disguising itself as a tool to appropriate Facebook accounts
Up until last year, it was common to encounter campaigns associated with known entities such as DIAN, Avianca and Falabella in e-mail attachments wit…
Microsoft Patches Critical Flaws in Windows, Browsers
Microsoft’s February 2016 Patch Tuesday updates include a total of 13 bulletins designed to address dozens of vulnerabilities in the company’s produc…
Adobe Patches Flaws in Flash, Photoshop, Connect
Adobe has released security updates and hotfixes to address vulnerabilities in Flash Player, Photoshop, Bridge, Connect, and Experience Manager.
Critical Flaws Found in NETGEAR Network Management System
Netgear, one of the most popular router manufacturers, has been vulnerable to two different flaws that could allow hackers to compromise your corpora…
Google patched Nexus devices, including a critical Wi-Fi flaw
Google announced to have patched a number of critical vulnerabilities affecting the Nexus devices that lead to the complete hack of the device.
Emergency. Hundreds of compromised WordPress sites serve TeslaCrypt ransomware
Operators running websites based on the WordPress must be aware of a spike in the number of compromised platforms used to deliver the TeslaCrypt rans…
Fake Flash Update Serves OS X Scareware
Experts have spotted an OS X scareware campaign that leverages fake Adobe Flash Player installers to trick users into downloading shady software onto…
Microsoft EMET Adds Windows 10 Compatibility
Microsoft on Tuesday announced that the latest version of its Enhanced Mitigation Experience Toolkit (EMET) includes Windows 10 compatibility, and br…
XSS vulnerability in Roundcube 1.0.5 - 1.1.1
Webmail client Roundcube (versions 1.0.5 - 1.1.1 ) contains
XSS vulnerability, allowing the attacker arbitrary code injection. Recommended fis is up…
LG Patches Severe Smartphone Hijack Vulnerability
LG today released a security update for some of its latest smartphones to resolve a severe vulnerability found in the Smart Notice application.
Samsung Patches Critical Vulnerabilities in Android Devices
Samsung has released a maintenance update for its major Android flagship Galaxy models to resolve 16 vulnerabilities in these devices.
OpenSSL to Patch High Severity Vulnerability
The OpenSSL Project announced today that upcoming releases of the cryptographic software library will address two security flaws.
Critical Magento Flaws Expose Sites to Takeover
The developers of the popular e-commerce platform Magento released a security update last week to patch more than 20 vulnerabilities, including ones …
Backdoor Found in Several Fortinet Products
FortiOS is not the only Fortinet product affected by the backdoor whose existence was brought to light earlier this month, a review conducted by the …
Critical iOS Flaw allowed Hackers to Steal Cookies from Devices
Apple has patched a critical vulnerability in its iOS operating system that allowed criminal hackers to impersonate end users' identities by granting…
Be careful Facebook users, you are under attack!
Facebook users are receiving malicious email delivering malware masquerading as audio message, a similar campaign also targeted WhatsApp users.
TeslaCrypt Flaw Allows Free File Decryption
TeslaCrypt, a ransomware family that emerged roughly a year ago, includes a design flaw that has already allowed security researchers build a free fi…
Zero-Day Flaw Found in 'Linux Kernel' leaves Millions Vulnerable
A new critical zero-day vulnerability has been discovered in the Linux kernel that could allow attackers to gain root level privileges by running a m…
Unpatched Drupal flaws open websites to attacks
IOActive has uncovered a number of serious vulnerabilities affecting the Drupal CMS that could be exploited to completely takeover the vulnerable web…
Google Patches Critical Flaw in Android Mediaserver
Google on Monday released the latest set of updates for its Android operating system (OS), including fixes for five critical security vulnerabilities…
2015
CVE-2015-8562 – 16,000 Daily Attacks on vulnerable Joomla servers
Experts at Symantec discovered that hackers quickly take advantage of CVE-2015-8562 remote code execution to compromise Joomla servers.
Adobe Issues Emergency Patch For Flash Zero-Day Under Attack
Adobe released an out-of-band security update on Monday to address multiple vulnerabilities rated as critical in its Flash Player, including one (CVE…
Victims of the Gomasom Ransomware can now decrypt their files for free
Fabian Wosar, security researcher at Emsisoft, created a tool for decrypting files locked by the Gomasom Ransomware.