2015
Juniper Firewalls with ScreenOS Backdoored Since 2012
Juniper Networks has announced that it has discovered "unauthorized code" in ScreenOS, the operating system for its NetScreen firewalls, that could a…
Microsoft Removes Trust in Root Certificates from CAs
Microsoft on Thursday announced that it plans on removing trust on root certificates issued by 11 Certificate Authorities (CAs) in January 2016.
Critical DoS Flaw Patched in BIND
The Internet Systems Consortium (ISC) announced on Tuesday the availability of BIND updates that address several vulnerabilities, including a remotel…
Critical Flaw in FireEye Appliances Exploitable by Sending an Email
Simply just sending an email or getting a user to click on a link was enough to exploit a critical remote code execution vulnerability in FireEye app…
Wireless Routers Plagued by Unpatched Flaws
Wireless SOHO routers from ZyXEL, Belkin, ReadyNet, Amped Wireless, Buffalo and Netgear are plagued by multiple unpatched vulnerabilities, researcher…
Dell, Lenovo and Toshiba bloatware bugs put millions of users at risk of being hacked
Proof-of-concept code released in the wild can exploit vulnerabilities in pre-installed software (bloatware, crapware) on Dell, Lenovo and Toshiba PC…
Linksys wireless routers are open to cyber attacks
According to an advisory published by the KoreLogic firm the Linksys EA6100-6300 wireless routers are vulnerable to attacks due to flawed CGI scripts…
Adobe, Microsoft Each Plug 70+ Security Holes
Adobe and Microsoft today independently issued software updates to plug critical security holes in their software. Adobe released a patch that fixes …
Apple Issues Security Updates for OS X, iOS, Safari
Updates released by Apple on Tuesday for OS X, iOS, Safari, Xcode, watchOS and tvOS address tens of vulnerabilities.
Google Patches Over Dozen Serious Flaws in Chrome
Google announced on Tuesday the availability of Chrome 47, a version that brings 41 security fixes, including more than a dozen serious vulnerabiliti…
Node.js to Patch Serious DoS Flaw
The developers of Node.js, the popular cross-platform runtime environment, this week will release security updates that patch a couple of vulnerabili…
Dell puts users at risk with dangerous eDellRoot root certificate
Dell is in the headlines for shipping PCs with a pre-installed trusted root certificate dubbed eDellRoot that opens users to a number of cyber attack…
VMware Updates Products Due to Flaw in Apache Flex BlazeDS
VMware has released updates for several of its products to address an information disclosure issue caused by a vulnerability in Apache Flex BlazeDS.
A flaw in D-Link Switches opens corporate networks to hack
A flaw in certain D-Link switches can be exploited by remote attackers to access configuration data and hack corporate networks.
Libpng Library Updated to Patch Vulnerabilities
Libpng, the official Portable Network Graphics (PNG) reference library, has been updated to address a couple of memory corruption vulnerabilities.
Chrome exploit leaves million Android devices open to attack
At the MobilePwn2Own, a Chinese expert has demonstrated how to hijack an Android smartphone by exploiting a zero-day flaw in the Chrome browser.
Flaw in Linux.Encoder1 ransomware reveals the decryption key
Experts at Bitdefender have discovered a flaw in Linux Encryption Ransomware Linux.Encoder1 that exposes the decryption Key used to lock the files.
Critical Fixes for Windows, Adobe Flash Player
For the third time in a month, Adobe has issued an update to plug security holes in its Flash Player software. The update came on Patch Tuesday, when…
1-Click Way to Check If your Android Device is Vulnerable to Hacking
Android Vulnerability Test Suite (VTS), developed by mobile security firm NowSecure, is a free vulnerability scanner that scans your Android device f…
Remote Code Execution Flaw Found in Java App Servers
Several popular Java-based products are affected by a serious vulnerability that can be exploited by malicious actors to remotely execute arbitrary c…
High-Risk SAP HANA Vulnerabilities Patched
Today, researchers at Onapsis disclosed 21 security issues in SAP’s HANA in-memory database management, application processing and integration servic…
Linux ransomware already infected at least tens of users
Researchers at Russian antivirus company Doctor Web have discovered a Linux ransomware that has already infected tens of users.
vBulletin security patches and zero-day exploit available online
Rumors on the Internet says that the hackers who breached vBulletin forum website exploited a zero-day flaw, the company issued emergency security pa…
Cisco Patches Serious Flaws in Security, Wireless Appliances
Cisco has released software updates to address a series of critical and high severity vulnerabilities affecting some of the company’s security and wi…
Google Researchers Find Serious Flaws in Galaxy S6 Edge
Researchers from Google’s Project Zero have identified nearly a dozen high severity vulnerabilities in the Android operating system running on Samsun…
How CoinVault or Bitcryptor victims could try to recover their files
Victims of CoinVault ransomware can now rely on a new set of encryption keys added to the free CoinVault Ransomware Decryptor tool to recover their f…
Project Turris was awarded
Security project Turris was awarded IPASCO International Award in the category of Innovative Cyber Security or Privacy Research. The IPACSO jury …
Several Flaws Patched in Xen Hypervisor
The Xen Project released on Thursday a total of nine advisories describing recently patched Xen hypervisor vulnerabilities.
Adobe Patches Critical Vulnerability in Shockwave Player
Adobe updated Shockwave Player on Tuesday to address a critical vulnerability that can be exploited for arbitrary code execution.
Beware of fake plane tickets hoax on Facebook
A fake giveaway is circulating on Facebook, offering free tickets to British Airways or Emirates flights. The scam spreads through the same link, sha…
Windows 10 Security
In contrast to its quick adoption by users, Windows 10 has been plagued by a number of privacy and security concerns. Here are the top five articles …
Joomla 3.4.5 patches Critical SQL Injection Vulnerability
Joomla – one of the most popular open source Content Management System (CMS) software packages, has reportedly patched three critical vulnerabilities…
Apple fixes serious flaws in the Productivity Apps
Updates released last week by Apple for Apple Productivity Apps fix a number of flaws that can be exploited for a number of attacks.
Vulnerabilities Identified in Network Time Protocol Daemon (ntpd)
The Network Time Foundation's NTP Project has released an update addressing multiple vulnerabilities in ntpd. Exploitation of some of these vulnerabi…
Western Digital self-encrypting hard drives are not secure
A trio of researchers has demonstrated that some versions of self-encrypting hard drives manufactured by the Western Digital are affected by security…
Thousands of Magento Sites Abused for Malware Distribution
A large number of websites powered by eBay’s Magento e-commerce platform have been breached and abused to deliver malware, researchers warned over th…
LibreSSL Vulnerability Found During OpenSMTPD Bug-Hunt
Researchers investigating ways to cause remote code execution against known vulnerabilities in OpenSMTPD have stumbled across a memory leak in LibreS…
Google Chrome 46 Boosts Security
In a bid to help simplify security, Google is now reducing the number of page security warnings in its Chrome browser from four to three. The move co…
Emergency Patch released for Latest Flash Zero-Day Vulnerability
Two days ago, The Hacker News (THN) reported about the Zero-day vulnerability in the freshly patched Adobe Flash Player. The vulnerability was exploi…
Critical Flaw Patched in Akismet Plugin for WordPress
The developers of the Akismet plugin for WordPress have released an update to address a critical vulnerability that exposes websites to hacker attack…
Recently Patched Adobe Flash Versions Hit by Another Zero-day Exploit
Now today, Security researchers have disclosed a new zero-day vulnerability in fully patched versions of Adobe Flash, which is currently being exploi…
Patch Report: All Versions of Windows affected by Critical Vulnerability
Microsoft has rolled out six security updates this Patch Tuesday, out of which three are considered to be "critical," while the rest are marked as "i…
Adobe Patches Many Flaws in Flash Player, Acrobat, Reader
Updates released on Tuesday by Adobe for Flash Player, Reader and Acrobat address a significant number of vulnerabilities that expose the users of th…
Chrome 46 Patches Vulnerabilities, Simplifies Page Security Icon
Google announced on Tuesday the release of Chrome 46, a version that patches several serious vulnerabilities and simplifies the security icon display…
Vulnerability in Netgear Wireless Router
Multiple NETGEAR wireless routers are out of the box vulnerable to an authentication bypass attack. No router options has to be changed to exploit th…
New Attack Targeting Microsoft Outlook Web App (OWA) to Steal Email Passwords
Researchers have unearthed a dangerous backdoor in Microsoft's Outlook Web Application (OWA) that has allowed hackers to steal e-mail authentication …
AV-Test – Which is the best Antivirus for Linux systems?
The Independent AV-Test Institute has analyzed 16 Linux security solutions against Windows and Linux threats under Ubuntu. The results are disconcert…
WordPress Jetpack Plugin Patched Against Stored XSS Vulnerability
Insecure plugins have been at the heart of numerous attacks launched from compromised WordPress site. One was patched this week in Jetpack, a plugin …
TrueCrypt Vulnerabilities Allow System Compromise, Researchers Warn
Two new security vulnerabilities affecting free encryption tool TrueCrypt may allow attackers to obtain admin-level privileges and install malware on…
Microsoft Clarifies User Data Collection in Windows 10
Microsoft on Monday published new details on the user data collection in Windows 10, in an attempt to put controversy on the matter to rest.