2017
WordPress, Apple and OpenOffice release multiple security updates
WordPress releases new version 4.8.3 which serves as security release for all previous versions and it's strongly recommended to update sites immedia…
Critical Patch For Oracle’s Identity Manager
Otacle has release patch for critical vulnerability found in Oracle Identity Manager. Vulnerability CVE-2017-10151 has a CVSS v3 base score of 10.0, …
Security Update for Google Chrome
Google has released Chrome version 62.0.3202.75 for Windows, Mac, and Linux. This version patches denial-of-service vulnerability.
Bad Rabbit ransomware
Mainly Russia and Ukraine were hit by a new ransomware called BadRabbit. Among the most damaged is Kiev underground and international airport in Odes…
Buggy Microsoft Outlook Sending Encrypted S/MIME Emails With Plaintext Copy For Months
Beware, If you are using S/MIME protocol over Microsoft Outlook to encrypt your email communication, you need to watch out. From at least last 6 mont…
KRACK - WPA2 breached
Today was made public new attack called KRACK able to breach WPA and WPA2 both Personal and Enterprise wireless networks. Update of all devices able …
Important vulnerability fixed in Apache Tomcat
Several security vulnerabilities have been patched in recent weeks in Apache Tomcat. The list of fixed flaws recently addressed also included code ex…
Three WordPress Plugin Zero-Days Exploited in the Wild
Hackers have exploited three zero-days to install backdoors on WordPress sites, according to a security alert published minutes ago by WordPress secu…
Security fixes for popular CMS Joomla, WordPress and e-commerce platform Magento
WordPress has release security update for all previous versions and encourages you to update your sites immediately.
Also Joomla has released new ver…
Samba Releases Security Updates
The Samba Team has released security updates to address several vulnerabilities in Samba. An attacker could exploit any of these vulnerabilities to o…
CCleaner tool was compromised
Piriform issued a security notification about its product CCleaner. They recently determined that their 32-bit version of the v5.33.6162 of CCleaner …
Malware in PyPi.org libraries
SK-CSIRT team iniciated removal of some harmless malware libraries from Python language official repository PyPi. They pointed to the threat for admi…
New security patches from Microsoft and VMware
New security patches were issued by Microsoft and VMware this week. Some ot the vulnerabilities fixed by Microsoft are possible to expoit for remote …
BlueBorne: Critical Bluetooth Attack Puts Billions of Devices at Risk of Hacking
Security researchers have just discovered total 8 zero-day vulnerabilities in Bluetooth protocol that impact more than 5.3 Billion devices—from Andro…
Adobe Patches Two Critical RCE Vulnerabilities in Flash Player
As part of its monthly security updates, Adobe has released patches for eight security vulnerabilities in its three products, including two vulnerabi…
Security vulnerability fixes for Chrome and Struts 2
Google has released Chrome version 61.0.3163.79 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that an attacker could e…
Drupal patches critical access bypass flaw in engine core
Drupal has issued a security update which fixes a number of critical flaws in the website management platform's core engine. According to Drupal's se…
Adobe, Microsoft and Mozilla released security vulnerabilities fixes
Adobe has released security updates to address vulnerabilities in Adobe Flash Player, Acrobat, Reader, Digital Editions or Experience Manager. Exploi…
Adobe Patches 69 Flaws in Reader, Acrobat
Security updates released by Adobe for its Flash Player, Reader, Acrobat, Digital Editions and Experience Manager products address more than 80 vulne…
Hackers Hijacked Chrome Extension for Web Developers With Over 1 Million Users
Chris Pederick, the creator of Web Developer Chrome extension that offers various web development tools to its users, alerted late Wednesday that som…
Oracle's July 2017 Critical Patch to address a total of 308 flaws
Oracle issued its quarterly update, the July 2017 Critical Patch Update (CPU), that addresses 308 security vulnerabilities, 30 of them are rated as c…
Adobe and Microsoft push critical security fixes
Microsoft has released updates today for the Windows 10 operating system, as well as for other of the company's products, updates that fix 55 securit…
Money demanding malware for Android
Thousands of Android users may be at risk to a newly discovered form of SpyDealer malware which attempts to extort victims by threatening to leak a t…
Zero-day flaw in Skype
A critical flaw in Microsoft’s Skype web messaging and call service allows attackers to crash systems and execute code.This week, Vulnerability Lab s…
New mutation of ransomware Petya on rise
According to multiple sources, a new variant of Petya ransomware, also known as Petwrap, is spreading rapidly with the help of same Windows SMBv1 vul…
Critical RCE flaw found in OpenVPN
This year, two independent security audits of OpenVPN were carried out to look for flaws, backdoors, and other defects in the open source software. R…
Microsoft Windows updates
The latest updates for Microsoft Windows are patching several remote code execution vulnerabilities. Some of the bugs are so important that Microsoft…
New Tor Browser 7.0 implements multiprocess mode, content sandbox, and Unix domain sockets
The Tor Project Team has announced the release of Tor Browser 7.0, it comes with multiprocess mode, content sandbox, and Unix domain sockets.
Hard-coded Passwords Make Hacking Foscam ‘IP Cameras’ Much Easier
Security researchers have discovered over a dozen of vulnerabilities in tens of thousands of web-connected cameras that can not be protected just by …
Google releases security updates for Chrome
Google has released Chrome version 59.0.3071.86 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that, if exploited, may …
Microsoft issues out-of-band updates for its products
Microsoft issues out-of-band [update] fixing a bug in Microsoft Protection Engine (contained in i.e.: Windows Defender or Exchange Server). Five of t…
Malicious file path can brick Windows 7 and 8
Computers with Windows 7 and Windows 8 contain a bug, which can lead to system hang. All an attacker needs to do is to access a nonexistent file in C…
Vulnerability in sudo version from 1.8.6p7 to 1.8.20
From version 1.8.6p7 to 1.8.20 Linux sudo command contains a security vulnerability CVE-2017-1000367, which allows the local user to get the root pe…
Judy Android Malware Infects Over 36.5 Million Google Play Store Users
Security researchers have claimed to have discovered possibly the largest malware campaign on Google Play Store that has already infected around 36.5…
FreeRadius Authentication Bypass
Today, Stefan Winter released details about a vulnerability in FreeRADIUS, an open source implementation of the RADIUS protocol, which can be used to…
enSilo released a free patch for RDP exploit EseemAudit
New exploits were published in recently leaked NSA documents. One of them - EsteemAudit exploit is a hacking tool that targets RDP service (port 3389…
7-Year-Old Samba Flaw Lets Hackers Access Thousands of Linux PCs Remotely
A 7-year-old critical remote code execution vulnerability has been discovered in Samba networking software that could allow a remote attacker to take…
Beware! Subtitle Files Can Hack Your Computer While You're Enjoying Movies
A team of researchers at Check Point has discovered vulnerabilities in four of the most popular media player applications, which can be exploited by …
Critical SQL Injection CVE-2017-8917 vulnerability patched in Joomla, update it now!
Joomla maintainers released a fix for a critical SQL injection flaw, tracked as CVE-2017-8917, that can be exploited by a remote attacker to hijack w…
How to Stop Ransomware
Ransomware is a fast-growing security threat. Here's how to prevent it - or get rid of it if you have it.
Adobe, Cisco and Microsoft release security updates
Microsoft has released monthly security updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulne…
Google users hit by an massive phishing attack
Google users were hit with an extremely convincing phishing spree. Targets received messages with the subject like "[Sender] has shared a document on…
Display Software Flaw Affects Millions of Devices
The security hole was identified by researchers at SEC Consult in display software developed by Portrait Displays. The impacted product allows users …
Squirrelmail 1.4.22 is affected by a Remote Code Execution flaw, no fix is available
The popular PHP webmail package SquirrelMail is affected by a remote code execution vulnerability tracked as CVE-2017-7692, that could be exploited b…
Oracle, Drupal and Google Chrome release security updates
Oracle released their April 2017 Critical Patch Update, that resolves a record breaking 299 vulnerabilities across all of their products. Of thes…
Phishing with Unicode Domains
A Chinese infosec researcher has discovered a new "almost impossible to detect" phishing attack that can be used to trick even the most careful users…
Thousands of Hacked Home Routers are Attacking WordPress Sites
Last week, while creating the Wordfence monthly attack report, we noticed that Algeria had moved from position 60 in our “Top Attacking Countries” li…
Critical Security Updates from Adobe, Microsoft
Adobe and Microsoft separately issued updates on Tuesday to fix a slew of security flaws in their products. Adobe patched dozens of holes in its Flas…