2015
New Google Password Alert extension already hacked
A few hours after the presentation of the Google Password Alert extension a researcher already have developed two methods to bypass it.
MySQL SSL/TLS Connections at Risk Due to BACKRONYM Flaw
MySQL, Oracle’s relational database management system, is plagued by a vulnerability that can be exploited to downgrade SSL/TLS connections, accordin…
8 Best Android Apps To Improve Privacy and Security in 2015
Just to have a good anti-virus protection app in your smartphone doesn’t mean a complete Security.
Password Alert Chrome Extension to Protect your Google Account from Phishers
As cybercriminals have started using sophisticated phishing techniques in an attempt to hijack online users’ account, Google on Wednesday launched a …
A flaw in Realtek SDK exposes SOHO routers to the attack
A flaw affecting Realtek SDK exposes SOHO routers to remote code execution attacks. List of vulnerable devices include D-Link and TRENDnet products.
Firmware Update for Barracuda Web Filter Fixes SSL Inspection Flaws
Barracuda Networks has released a firmware update for its Barracuda Web Filter solution to address a couple of SSL inspection flaws reported by Will …
WordPress 4.2.1 Security Release
WordPress 4.2.1 is now available. This is a critical security release for all previous versions and we strongly encourage you to update your sites im…
WordPress 4.1.2 Security Release
WordPress 4.1.2 is now available. This is a critical security release for all previous versions and we strongly encourage you to update your sites im…
Wi-Fi Component Flaw Exposes Windows, Linux, OS X Systems
Researchers have identified a vulnerability in wpa_supplicant, the popular Wi-Fi Protected Access (WPA) supplicant for Linux, BSD, Mac OS X, Windows,…
How to use a malicious JPEG to hack corporate networks
Security researcher Marcus Murray discovered a method to exploit a malicious JPEG to compromise modern Windows servers inside corporate networks.
Critical Flaw in Magento eCommerce Platform Exposes Online Shops
Researchers have identified a serious vulnerability in Magento, the popular e-commerce platform owned by eBay. The security hole exposes the details …
Safari cookie access vulnerability affects a billion iThings
A Safari iOS/OS X/Windows cookie access vulnerability (CVE-2015-1126) potentially affects a billion iThings devices, patch it as soon as possible.
Java – New vulnerabilities affects million applications
Oracle warned that a dozen of new Java security vulnerabilities could be exploitable remotely to gain access to a target application without login.
MS15-034: HTTP.sys (IIS) DoS And Possible Remote Code Execution. PATCH NOW
Denial of Service (DoS) exploits are widely available to exploit CVE-2015-1635, a vulnerability in HTTP.sys, affecting Internet Information Server (I…
Kaspesky releases new tool to fix computers with CoinVault Ransomware
The victims of CoinVault ransomware can now decrypt the files encrypted by the malicious code by using a free removal tool released by Kaspersky firm…
Microsoft Releases April 2015 Security Bulletin
Microsoft has released eleven updates to address vulnerabilities in Microsoft Windows. Some of these vulnerabilities could allow elevation of privile…
Redirect to SMB flaw affects all versions of Windows
The Redirect to SMB vulnerability affects all supported versions of Windows and could be exploited to steal users’ credentials for various services.
Just need the MAC and serial number to generate Belkin WPS Pin
A researcher discovered that Belkin implements a vulnerable procedure to generate WPS PINs. Just knowing MAC and the serial number he can calculate i…
Cisco Patches Several Vulnerabilities in ASA Software
Cisco informed customers on Wednesday that it has released software updates to address several high severity vulnerabilities affecting Cisco Adaptive…
Steam users beware! Bad guys hide malware inside fake game demos
Steam users are being warned to be on their guard after cybercriminals were found trying to infect video game fans by disguising their malicious down…
Apple Patches Vulnerabilities in OS X, iOS, Safari
Updates released by Apple on Wednesday address numerous vulnerabilities in Mac OS X, iOS, Safari and other products developed by the company.
A severe arbitrary code execution in BitTorrent Sync affects various products
A security expert has discovered a severe vulnerability in BitTorrent Sync that can be exploited by a remote attacker to execute arbitrary code on a …
Flaw in WP-Super-Cache plugin threatens million of WordPress websites
Million of WordPress websites are vulnerable to cyber attacks due to a critical vulnerability affecting the WP-Super-Cache plugin.
How to Protect your Personal Data from Facebook Applications your Friends Use
Many Facebook users have an aversion to third party Facebook applications and rightly so. The platform is riddled with apps that are used to spread s…
Wireshark TCP Flags dissector
Lua dissectors are a great way to enhance Wireshark, so I wrote a dissector that adds Snort-style TCP flags. When you install the dissector, it adds …
TrueCrypt doesn’t include a backdoor according to a security audit
The security audit of the popular encryption software TrueCrypt reveals the absence of the backdoor and other significant flaws exploitable by the NS…
VMware Updates Products to Address Java Vulnerabilities
VMware has released updates and patches for several of its products in order to resolve vulnerabilities affecting the Java SE Runtime Environment (JR…
Google Lets SMTP Certificate Expire
Whoops! It appears as though Google on Saturday let a digital certificate expire that was used to secure its smtp.google.com domain, the domain used …
Compromised WordPress Sites Lead to Drive-By Attack on Pirate Bay Clone
Several websites running WordPress have been injected with malicious code redirecting visitors to a fake Pirate Bay website that exposes to drive-by …
Mozilla Patches Critical Vulnerabilities With Release of Firefox 37
Firefox 37, the latest version of Mozilla’s web browser, includes fixes for over a dozen security issues, including several vulnerabilities that have…
Puush accidentally infects Windows users with password-stealing malware
Puush describes itself as a “quick and simple way to share screenshots”. Unfortunately, it also seems to be a quick and simple way to infect your …
Support Dell System Detect tool put PCs at risk
The exploitation of the Dell System Detect tool would allow threat actors to remotely install malware on users’ your Dell computers
Thousands of compromised WordPress websites redirect to exploit kits
For the past weeks a spike has been seen in the amount of WordPress websites embedding iframes to exploit kits; more than just Fiesta has been seen. …
Adobe CVE-2011-2461 Remains Exploitable Four Years After Patch
A four year old Adobe Flash patch did not properly resolve a vulnerable Flex application, and attackers can exploit the bug, which is said to affect …
Cisco Discovers New "PoSeidon" Point of Sale Malware
Cisco on Friday shared details on what the company says is new breed of Point-of-Sale (PoS) malware that is more sophisticated and much better design…
'Google Analytics by Yoast' WordPress Plugin Patches Critical Vulnerability
Yoast has released a new version of its popular Google Analytics plugin for WordPress to address a persistent cross-site scripting (XSS) vulnerabilit…
Mobile apps still vulnerable to FREAK attacks
Despite principal vendors have released updates to fix the FREAK vulnerability many mobile apps for Android and Apple iOS are still vulnerable.
Beware of Skimming Devices Installed on the ATM Vestibule Doors
Despite anti-skimmer ATM Lobby access control system available in the market, we have seen a number of incidents in recent years where criminals used…
Facebook Vulnerability Leaks Users' Private Photos
If you have enabled automatic Facebook Photo Sync feature on your iPhone, iPad or Android devices, then Beware! Hackers can steal your personal photo…
Drupal Security Update Fixes Password Reset Flaw
New versions have been announced for Drupal 6 and 7, which include only security-related changes, one of them allowing a potential attacker to reset …
OpenSSL announced fix for mystery high critical vulnerability
New versions of OpenSSL will be released on Thursday to patch critical security vulnerabilities, one of which is considered very dangerous.
Qualys Releases SSL Labs APIs for Automated Website Testing
Cloud security and compliance solutions provider Qualys today announced the availability of free assessment APIs and a new tool that enable SSL Labs …
Microsoft tries to fix again LNK flaw exploited by Stuxnet
A security bulletin recently released by Microsoft addresses the LNK flaw that was exploited by Stuxnet and that we have wrongly considered patched s…
Adobe Fixes Critical Flash Player Vulnerabilities
Adobe has released security updates to patch nearly a dozen serious vulnerabilities affecting the Windows, Mac and Linux versions of Flash Player.
'WordPress SEO by Yoast' Plugin Vulnerability Affects Millions
A critical vulnerability has been discovered in the most popular plugin of the WordPress content management platform (CMS) that puts tens of Millions…
Apple and Microsoft released updates to fix the FREAK flaw
Microsoft and Apple released security updates to fix the FREAK vulnerability recently discovered and affecting their products.
Buggy Panda Update Causes Problems for Home, Enterprise Users
A problematic signature file pushed out by Panda Security on Wednesday caused some legitimate files to be detected as malicious and moved to quaranti…
'Activate WhatsApp calling feature' Invite Scam Targeting Users with Malware
If you receive an invitation message from any of your friend saying, "Hey, I’m inviting you to try WhatsApp Free Voice Calling feature, click here to…
Cryptowall Makes a Comeback Via Malicious Help Files (CHM)
A new spam wave has hit hundreds of mailboxes with malicious .chm attachments to spread the infamous Cryptowall ransomware, malware researchers from …
XML Files Used to Distribute Dridex Banking Trojan
Cybercrooks have been leveraging malicious macros hidden inside XML files to distribute the Dridex financial malware, researchers have warned.