News

Drupal developers have released updates for versions 7 and 8 to address security flaws that can lead to information disclosure, cache poisoning, redi…

The decryption keys for the CrySis ransomware were posted online on the BleepingComputer.com forum by a user known as crss7777.

The CVE-2016-4484 vulnerability can be exploited to gain a Linux Root shell by simply pressing the Enter Key for 70 Seconds.

VMware informed customers on Sunday that it has patched a critical out-of-bounds memory access vulnerability affecting its Workstation and Fusion pro…

As announced on Tuesday, the OpenSSL project team released OpenSSL version 1.1.0c that addresses three security vulnerabilities in its software.

The …

A vulnerability in Chrome for Android is actively being exploited in the wild that allows hackers to quietly download banking trojan apps (.apk) onto…

The iOS applications of Twitter, LinkedIn and possibly other major vendors can be abused by hackers to initiate phone calls to arbitrary numbers. The…

An investigation by German television channel NDR (Norddeutscher Rundfunk) has discovered a series of privacy breaches by Web Of Trust (WOT) – one of…

Security updates released by Adobe on this Patch Tuesday address one vulnerability in Connect for Windows and nine arbitrary code execution flaws in …

Carnegie-Mellon CERT warns of a flawed implementation of HNAP in D-Link routers (CVE-2016-6563) that could be exploited for remote execute code.

The security expert Dawid Golunski disclosed critical vulnerabilities in MySQL, MariaDB and PerconaDB can lead fully compromise of servers.

Three critical Remote Code Execution vulnerabilities have been reported in Memcached by security researcher Aleksandar Nikolich at Cisco Talos Group …

Researchers from ENSILO have devised a method, called AtomBombing, to inject malicious code in Windows OS that bypasses modern anti-malware tools.

Libtiff library is affected by three vulnerabilities but unfortunately one of them, tracked as CVE-2016-8331, is still unpatched.

Adobe has issued a security patch for its Flash Player that fixes a critical vulnerability, tracked as CVE-2016-7855, used in targeted attacks.

Joomla has released the new version Joomla 3.6.4 that fixes two critical account creation vulnerabilities affecting the popular CMS.

Viewing a maliciously crafted JPEG may lead to arbitrary code execution, a boobytrapped JPEG could compromise your iPhone. Upgrade to iOS 10.1

Talos team at Cisco Systems has released a free, open-source tool that protects the master boot record (MBR) sector of computers from modification by…

Information Security experts have discovered an SQL injection zero-day vulnerability in Joomla component ja-k2-filter-and-search.

A new Linux kernel vulnerability disclosed on Wednesday allows an unprivileged local attacker to escalate their privileges on a targeted system. Red …

Lexmark has released an update for its Markvision Enterprise printer management software to address serious vulnerabilities that could allow a remote…

Experts from the White Fir Design discovered cybercriminals exploited a zero-day flaw in an e-commerce plugin for WordPress to upload a backdoor.

A recently conducted security assessment of VeraCrypt has revealed over 25 security vulnerabilities in the popular encryption platform, including a c…

Akamai Technologies revealed that hackers are exploiting a 12-year-old bug in OpenSSH to hack into millions of IoT devices with SSHowDowN Proxy attac…

Kaspersky Lab experts have released a Polyglot ransomware decryption tool, which enables users who have suffered from this ransomware, also known as …

Cisco issued a security advisory about a vulnerability, tracked as CVE-2016-6406, affecting the Email Security Appliance Internal Testing Interface.

D-Link DWR-932B LTE router is allegedly vulnerable to over 20 issues, including backdoor accounts, default credentials, leaky credentials, firmware u…

Law enforcement and IT Security companies have joined forces to disrupt cybercriminal businesses with ransomware connections. In this case, we are re…

A firmware update released by Siemens this month for some of its industrial network security products fixes a vulnerability that could expose potenti…

OSquery, an open-source framework created by Facebook that allows organizations to look for potential malware or malicious activity on their networks…

Mozilla has patched many critical and high severity vulnerabilities this week with the release of Firefox 49, including a recently disclosed certific…

Mozilla plans to release a Firefox update to address the cross-platform remote code-execution vulnerability recently patched in the Tor browser.

The …

Cisco has released software updates for its WebEx Meetings Server product to address a couple of critical and high severity vulnerabilities that can …

An independent research has revealed multiple severe MySQL vulnerabilities. This advisory focuses on a critical vulnerability with a CVEID of CVE-…

WordPress 4.6.1 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately…

Security analyst Graham Cluley published description of new linux rootkit "Umbreon", using some kind of "stealth technology" to hide itself from sc…

While searching for new scenarios to deliver their malwares[1][2], attackers launched a campaign to deliver malicious code embedded in Microsoft Publ…

Tens of thousands of devices running Cisco’s Adaptive Security Appliance (ASA) software are still vulnerable to attacks leveraging an exploit leaked …

A newly observed Linux Trojan backdoor is actively targeting Internet of Things (IoT) devices and enjoying very low detection rate, even on systems u…

Article published on blog.nic.cz describes surprisingly high telnet traffic on internet, caused in majority by insecured smart devices (IoT devices).

Server The hacer news has published an [article]https://thehackernews.com/2016/08/dropbox-data-breach.html) about massive leak od Dropbox credential…

Database security has never been more important, given the high value hackers place on data. These database security best practices will help protect…

Opera Software reported a security breach last night, which affects all users of the sync feature of its web browser. So, if you’ve been using Ope…

A new type of ransomware, dubbed Alma, was recently observed being distributed via the RIG exploit kit. Researchers at PhishLabs have analyzed Alma ,…

DetoxCrypto ransomware is raising suspicions that a new ransomware-as-a-service (RaaS) affiliate program might be in the works.

Researchers published two attack schemes against car locking systems utilizing radio device. These attack schemes are related to hundreds of millions…

Secure Boot Bypass Allows Hackers to Load Bootkits/Rootkits on Windows Devices. Microsoft has been attempting to patch a serious Secure Boot vuln…

Juniper Networks released hotfixes this week to address a vulnerability in its JUNOSe software. The issue, related to the processing of IPv6 packets,…

According to article on The Hacker news server vulnerability called "Quadrooter" applies to cellphones using Qualcomm chipset. You can check your dev…

New article on blog.nic.cz regarding the resulst of pentesting of home gateways provided by hungarian UPC.