Vulnerabilities

Chinese Spies Stole NSA Cyberweapons Long Before Shadow Brokers Leak

Forensic analysis shows a Chinese APT using Equation Group hacking tools at least a year before Shadow Brokers dumped its cache in April 2017. Source link … [Read more...] about Chinese Spies Stole NSA Cyberweapons Long Before Shadow Brokers Leak

Oleksii Petrovich Ivanov has been extradited in the U.S. after allegedly launching malvertising campaigns that caused victims to view malicious ads on more than 100 million occasions. Source link … [Read more...] about Ukrainian Charged With Launching 100 Million Malicious Ads

After researchers were able to bypass a file upload validation flaw patch in WP Live Chat, a new patch has been issued. Source link … [Read more...] about WP Live Chat WordPress Plugin Re-Patches File Upload Flaw

Snowballing attacks using a recently patched critical bug show no sign of abating. Source link … [Read more...] about Oracle WebLogic Exploit-fest Continues with GandCrab Ransomware, XMRig

Cisco patches two high-severity bugs that could be exploited by remote attackers. Source link … [Read more...] about High-Severity Bug Leaves Cisco TelePresence Gear Open to Attack

Web scammers are going after Marvel fans as the movie passes the $2.2 billion box-office mark, making it the second-highest grossing film of all time, behind only Avatar. Source link … [Read more...] about Avengers: Endgame Sites Promise Digital Downloads, Deliver Info-Harvesting

The three flaws enable an unauthenticated attacker to launch remote code execution attacks on printers. Source link … [Read more...] about High-Severity PrinterLogic Flaws Enable Remote Code Execution

A digital signing flaw killed add-ons for Firefox as well as Tor -- and no patch is yet available for Tor users. Source link … [Read more...] about Tor Security Add-On Abruptly Killed by Mozilla Bug

Will connected devices be insecure forever? Or will legislation - such as the recent UK mandate announced this week - help boost IoT security? Source link … [Read more...] about Extinguishing the IoT Insecurity Dumpster Fire

Amidst the PR glitz and popularity of bug bounty programs, experts worry that actual smart security strategy is being left behind. Source link … [Read more...] about Amid Bug Bounty Hype, Sometimes Security is Left in the Dust