2014
ReVuln team founds a zero-day in SCADA component
A researcher at of ReVuln disclosed a buffer overflow zero-day flaw in HMI software produced by Malaysian company Ecava.
Cisco confirmed that a Backdoor affects small business devices
Cisco confirmed the presence of a Backdoor that affects small business devices. The flaw was discovered by the French hacker Eloi Vanderbeken weeks a…
ASUS Routers setting could expose users data on Internet
[A default setting(http://securityaffairs.co/wordpress/21212/hacking/asus-routers-hack.html)] in Asus Routers allows an attacker to remotely access d…
Zero-Day Flaws Found, Patched In Siemens Switches
A security researcher has discovered a pair of zero-day vulnerabilities in a popular family of Siemens industrial control system switches that could …
Internet of Things Poses New Security Risks
The hackers who got into your computer or smartphone are now taking aim at the Internet of Things.
Is XXE the new SQLi?
Many modern applications today use XML documents to transfer data between clients and servers. Due to its simplicity, XML is actually great for this …
Kali Linux introducing Emergency Self Destruct feature to Full Disk Encryption
In an Emergency situation, triggering the nuke password from boot screen will delete all the key slots and makes the data on the drive inaccessible. …
23-year-old Stack overflow vulnerability discovered in X11 Server
At the 30th Chaos Communication Congress (CCC) in Germany, Ilja van Sprundel, a [security researcher gave the presentation(http://thehackernews.com/2…
Windows Zero-Day vulnerability used in targeted attacks against 28 Embassies
TrendLab malware analysts confirmed that recent Windows Zero-Day vulnerability was exploited in cyber attack against Embassies in a Middle Eastern ca…
VSAT terminals are opened for targeted cyber attacks
VSAT terminals (very-small-aperture terminal) used for satellite communications are vulnerable to external cyber attacks, the discovery was made by s…
Tajikistan's Domain Registrar hacked; Google, Yahoo, Twitter, Amazon also defaced
Website of Tajikistan's Domain registrar (domain.tj) authority has been hacked, that allows the hacker to access domain control panel.
Researcher Uncovers Backdoor In DSL Routers
Flaw in DSL routers could give attackers full, unauthenticated administrative access, researcher says.
Curse Hits World of Warcraft Players with Malware
A malicious Trojan hiding in a legitimate World of Warcraft (WoW) add-on is infecting players’ accounts.
Windows Autorun
When someone suspecting that a malware activity that may exist in a system or a compromised system one of the most obvious places to check is the sta…
Malicious advertisements served via Yahoo
Clients visiting yahoo.com received advertisements served by ads.yahoo.com. Some of the advertisements are malicious.
Snapchat To Update App In Wake Of Breach
App vendor planning new version that lets users opt out of appearing in 'beleagured Find Friends' feature.
Netgear, Linksys and many other Wireless Routers have a backdoor
The French hacker Eloi Vanderbeken discovered the presence of a backdoor in principal models of routers including Netgear, Linksys and Cisco.
The pre…
Vulnerability Assessment with Nexpose
Nexpose is one of the leading vulnerability assessment tools. The Nexpose community edition is a free program and the other editions are paid ones. I…
I will hack your systems with an SD Card
The hardware hacker Bunnie Huang presented at the Chaos Compute Club Congress how to exploit SD cards microcontroller for malicious purposes.
Cyber Thieves Are Stealing Money From ATMs With Infected USB Sticks
Cyber criminals are exploiting new techniques to attack ATMs (Automated Teller Machines) infecting the devices with specifically crafted malware.
2013
NTP Reflection Attack
Symantec has notice in the last few weeks that there is a significant NTP reflection attacks. NTP is Network time protocol and it’s used to synch the…
Snapchat Users Menaced By A Couple Of Malicious Exploits
Gibson Security revealed that The ‘Find Friends’ exploit and the ‘Bulk Registration’ Exploit menace the security and privacy of million of Snapchat u…
More than 1,400 Financial institutions in 88 Countries targeted by Banking Trojan in 2013
The financial malware's were the most popular threat this year. Money is always a perfect motivation for attackers and cyber criminals who are contin…
Samsung KNOX Security Software Embedded in Galaxy S4 Vulnerable, Researchers Say
Researchers have reportedly found a vulnerability in a security system embedded in Samsung's Galaxy S4 smartphone that could allow an attacker to ste…
Suspicious Mobile App Sends Bulk Messages
Promises of easy money should be taken with a grain of salt – especially when they come with a request to download a mobile app.
CryptoLocker Ransomware Now Spreading Through Removable Drives
During the past few months, advancements in CryptoLocker put ransomware on the public's radar in a major way.
DGA.Changer Malware: Changing Seed to Evade Sandbox
On October 24, adversaries hacked php.net and deployed an exploit kit, which served five different malware types. While the attack received extensive…
Hackers Can Covertly Activate MacBook Webcams Without Warning Light
Recently, a Hacker has managed to take nude photos of his high school classmate by covertly activating the Webcam in Macbook without turning on the w…
Facebook Launches the Magic Button: Scammers, Here’s our Official Dislike for You
Facebook launched the dislike option, which is so far available in the Messenger app. We can finally express disgust and discontent at the things our…
Adallom Discovered an Important Office 365 Token Disclosure Vulnerability
Adallom demonstrated that exploiting an Office 365 Token Disclosure Vulnerability an attacker can steal organisations SharePoint credentials.
Bad Version of Vulna Active on Google Play – in GTA V PC Countdown
GTA V PC Countdown, a rather popular application on Google Play, incorporates a vulnerable version of ad-serving framework AppLovin, also known as Vu…
Massive Android Mobile Botnet Hijacking SMS Data
A mobile botnet called MisoSMS is wreaking havoc on the Android platform, stealing personal SMS messages and exfiltrating them to attackers in China.
Weak Security In Most Mobile Banking Apps
Most mobile banking apps -- including those of major financial institutions -- contain configuration and design weaknesses that leave them with weake…
Website traffic report shows an increase of malicious bots activity
Incapula security firm published a new report on the analysis of website traffic evidencing the increment for malicious activities.
ENISA Threat Landscape 2013 Report, The Rise Of Cyber Threats
ENISA releases the ENISA Threat Landscape 2013, it a collection of information on top cyber-threats that have been assessed in the reporting period.
Fraudsters Target Cyber-Stalkers, Bitdefender Finds
“Stalkers may be the next big target for cyber-criminals because they have the characteristics of an easy-to-trick victim: incontrollable curiosity a…
Malware Dons Disguise as Microsoft IIS Module
According to Trustwave, the malware is manually installed by attackers after they have compromised a web server. Known as ISN, the malware is used by…
Facebook Phishing and Malware via Tumblr Redirects
We got a couple reports of pretty convincing Facebook spam redirecting users to malware and a Facebook phishing site.
Microsoft Released Security Patch For CVE-2013-5065 TIFF Zero-Day Vulnerability
Microsoft has released 11 Security Patch this Tuesday, including one for CVE-2013-5065 zero-day vulnerability, recently discovered Local privilege es…
Cisco Prime Network Registrar Cross Site Scripting Vulnerability Patch
Cisco Prime Network Registrar CVE-2013-3394 Cross Site Scripting Vulnerability.
Rogue Android Gaming App That Steals WhatsApp Conversations
Google has recently removed a Rogue Android gaming app called "Balloon Pop 2" from its official Play store that was actually stealing user's private …
Hardware Hacker Demos Zombie Drone Hijacker
The SkyJack drone automatically seeks out and hijacks other nearby Parrot drones. Will this mean trouble for Amazon's planned drone delivery fleet?
Microsoft, Europol, FBI And Partners Decapitated ZeroAccess Botnet
Microsoft Digital Crimes Unit, FBI, Europol and industry partners decapitated the feared ZeroAccess botnet that hijacks search results
Two Million Stolen Facebook, Twitter Login Credentials Found On 'Pony Botnet' Server
Security researchers at Trustwave's SpiderLabs found a Netherlands-based Pony Botnet Controller Server with almost two Million usernames and password…
D-Link Upgrades Its Firmware To Fix Backdoor Presence
D-Link company has recently released a new version of firmware to fix backdoor vulnerability in various network device models.
ENISA Releases Guide for Defending Against Attacks on Industrial Control Systems
The European Network and Information Security Agency (ENISA), has released a new guide designed to help organizations better mitigate attacks against…
VMware Patches Privilege Escalation Vulnerability Affecting Popular Products
Virtualization giant VMware released a series of patches on Tuesday to address a vulnerability that affects several of its popular software products …
Google Nexus Phone Vulnerable To SMS-Based DOS Attack
Nexus Smartphones are vulnerable to SMS-based DOS attack, where an attacker can force it to restart, freeze, or lose network connection by sending a …
Linux Worm Targets "Internet of things"
Malware hunters have stumbled upon a new Linux worm squirming through an old PHP vulnerability to infect hidden, Internet-enabled devices.
Ruby on Rails CookieStore Flaw Exposes Thousand of Websites
A security issue inside cookie-based storage mechanism of Ruby on Rails could expose thousand websites to cyber attacks.