2014
PayPal redirect exploited in Apple ID phishing attack
Fraudsters have exploited a redirection vulnerability in a PayPal website in an attempt to steal Apple IDs. Phishing emails sent by the fraudster wer…
SNMP reflections DDoS attacks on the rise
Team PLXsert has observed an increase in SNMP Reflection DDoS attacks. DDoS attacks are becoming more sophisticated and are still favorite weapons fo…
Multiple flaws in Outlook app for Android
Researchers from Include Security claim to have found multiple vulnerabilities in Outlook app for Android. Among found flaws in the app is storing e-…
eBay urges password change
After log-in credentials of eBay employees were compromised cyberattacker were allowed to eBay's corporate network. Although there is no evidence of …
Cryptocat offers End-to End Encryption For Facebook Messenger
Cryptocat is a tool that allows secure and encrypted chat which is easy and accessible for everyone. The app is well known for bringing encrypted com…
Criminals capture PINs over wireless remotely instead tamper ATMs
Criminals are exploiting news tactics to steal user’s PIN from ATMs, capturing them over wireless network instead risky tampering of the banking mach…
LOL, Jar File Malware Just Goes Viral Through Facebook Messages
If you came across any suspicious Facebook message with ‘LOL’ text or a fake Image file send by any of your Facebook friend, avoid clicking it. A Tro…
Who and how is using forged SSL certificates worldwide?
Who is abusing of forged SSL certificates in MITM attacks worldwide? A team of researchers implemented a new detection technique to detect the abuses…
Hackers Steal Google Account Passwords in Better Crafted Phishing Attack
Hackers grab Google account passwords in a new, better crafted phishing attack that is hard to catch with traditional heuristic detection. The scam s…
Real Ghost Caught on Camera! New Facebook Scams Lure Users to Download Malware
If your Facebook wall offers you any horror videos that claim to be of a real ghost spotted, don’t dare to click on them, as it may be hoaxes, malwar…
WooThemes hacked. Premium WordPress theme manufacturer warns of credit card leak
There’s potentially some rather bad news today if you are a customer of WooThemes, the popular WordPress theme manufacturer.
Anti-Phishing Feature in Beta Version of Google Chrome Poses Security Risks: Researchers
The new anti-phishing feature currently being tested in the experimental version of Google Chrome does not work as well as intended and poses securit…
Apple admits flaw in email attachment encryption
Apple is already working on fixing the flaw that was recently discovered in email encryption of attachments in iPhones and iPads. Although fix wasn't…
Cryptolocker moves to Android
Cryptolocker like ransomware have been threating victims for months now by encrypting victims harddisks and for decryption demanding high ransomware.…
What Not To Do In a Cyberattack
How to keep calm and avoid common mistakes in an incident response operation.
Using lnk file to deceive users in phishing attacks
Expert at Trustwave explained the tactics adopted by cyber criminals how to serve malware in phishing attacks exploiting .lnk files.
Help EFF Test Privacy Badger, Our New Tool to Stop Creepy Online Tracking
EFF is launching a new extension for Firefox and Chrome called Privacy Badger. Privacy Badger automatically detects and blocks spying ads around the …
Sparta – a Network Infrastructure Penetration Testing Tool
SPARTA is a python GUI application which simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and e…
PHP 5.4.28 Release Announcement
The PHP development team announces the immediate availability of PHP 5.4.28. 19 bugs were fixed in this release, including CVE-2014-0185. All PHP 5.4…
Microsoft Patches Internet Explorer Zero-Day Vulnerability, Even for Windows XP
Even though Windows XP is no longer supported by Microsoft and is past the time we normally provide security updates, we've decided to provide an upd…
Covert Redirect security vulnerability found in OAuth and OpenID
Covert Redirect vulnerability is the security flaw in the open standards for authorization OAuth and OpenID that is menacing IT industry.
Samsung Galaxy S5 owners can unlock LastPass with a keypress – but is that wise?
Popular password manager service LastPass has announced that it has introduced a new feature for Samsung Galaxy S5 users: Fingerprint scanning.
Skype leaves Sensitive User Data Unencrypted Locally On Computers
An application should always encrypt users' sensitive data, either it is local or stored on company servers, but still many popular services failed t…
FBI Warning Highlights Healthcare's Security Infancy
Cyberattacks likely to increase against healthcare providers, FBI warns, and experts say it's no surprise since industry's security posture is about …
FakeInst – Kaspersky discovered the first active Android SMS trojan
Victims may be compromised via a phishing campaign based on sexual theme or through a watering hole attack based on web sites proposing adult materia…
Update your Adobe flash player to stay safe
Adobe has issued an emergency security update to fix a critical vulnerability(CVE-2014-0515) in flash player.
Internet Explorer Zero-Day Turns into Permanent Threat for XP Users
A new Internet Explorer zero-day vulnerability is currently being exploited in the wild. The vulnerability identified on Saturday affects all version…
PHP Callback Functions: Another Way to Hide Backdoors
We often find new techniques employed by malware authors. Some are very interesting, others are pretty funny, and then there are those that really st…
Android Heartbleed Alert: 150 Million Apps Still Vulnerable
Warning to Android users: No patches are available for 150 million downloaded Android apps that remain vulnerable to the OpenSSL vulnerability known …
A malicious Chrome browser extension is stealing your digital coins
A user raised an alert on Reddit, on the presence of a malicious Chrome browser extension, on the official store, that is able to steal digital coins…
How to abuse Facebook feature to conduct powerful DDoS attack
A researcher discovered a flaw in the section “notes” of the social network Facebook that could be exploited by anyone to conduct a powerful DDoS att…
A flaw in old versions of NetSupport Manager exposes company data
Researcher David Kirkpatrick discovered a flaw in older versions of NetSupport Manager could expose sensitive configuration settings and lead to comp…
Dual_EC_DRBG Cryptography Algorithm Removed from NIST’s Random Number Generator Recommendation
The National Institute of Standards and Technology’s (NIST) has removed the Dual_EC_DRBG cryptography algorithm from the Random Number Generator Reco…
Heartbleed: Why aren’t certificates being revoked?
Netcraft's site reports now make it easy to see which websites have or have not revoked their SSL certificates in response to the Heartbleed bug. For…
Iniciative for funding crucial open source project
Not just as a response to Heartbleed bug has a non-profit organisation Linux Foundation started iniciative to support critical open source projects f…
Viber is vulnerable
Group of researchers, which has discovered just last week serious vulnerability in WhatsApp examined another popular application - Viber. Lack of sec…
Oracle gives Heartbleed update, patches 14 products
Oracle patches 14 of their products to stay protected from Heartbleed bug. List of Oracle products and their updates is available here.
Apple pushes out critical security fixes
Apple released an update on april 22nd for OS X, iOS and Apple TV. Some of the security flaws were in devices for a longer time. Apple TV goes from 6…
Routers TCP 32764 Backdoor Vulnerability Secretly Re-Activated Again
At the beginning of this year, we reported about the secret backdoor ‘TCP 32764’ discovered in several routers including, Linksys, Netgear, Cisco and…
Grams - First Search Engine for Underground Black Markets
We often talk about Underground communities, illegal websites or black markets, but as they are ‘Underground’ in nature i.e. Hidden websites running …
Millions Feedly users vulnerable to Javascript Injection attack
A security researcher discovered a serious Javascript Injection vulnerability in the popular Feedly Android App impacting Millions Users.
Unflod Baby Panda, the Chinese malware hit jailbroken iphone
Unflod Baby Panda is the name of a new mobile malware which is targeting jailbroken versions of Apple iPhone. The threat seems to have China origin.
The novelties inside the last critical update for P2P Zeus
Which are the security improvements in the critical update proposed by criminal ecosystem for P2P Zeus Botnet? Fortinet experts detected and analyzed…
Murdering Dexter
In this article we are going to solve a Bot challenge. The name of the bot is Dexter and the vulnerable VM which we are going to use is created by Br…
iBanking Android Malware targeting Facebook Users with Web Injection techniques
The malicious iBanking app installed on victims’ phone has capabilities to spy on user’s communications.
Heartbleed's Intranet & VPN Connection
It's been one week since the massive Heartbleed flaw was disclosed publicly and websites began frantically patching, but the potential danger of the …
Samsung Galaxy S5 fingerprint sensor hacked
SRLabs researchers have published a video Proof of Concept on YouTube to demonstrate that they were able to bypass the fingerprint authentication mec…
Oracle Releases Massive Security Update
Oracle just released a massive security update that covers 104 vulnerabilities across its product portfolio. Thirty-seven of the vulnerabilities affe…
Programming laguage security examined
WhiteHat security released its 2014 stats that measures the security of programming languages. Choosing the programming language is one of the most f…