exploit

WordPress plugin used by millions sports critical site-hijacking flaw

March 20, 2015

Another popular Yoast WordPress plugin has been found sporting a critical vulnerability that can be exploited by attackers to take over control of the site. A week ago it was …

Exploit kits in 2015: What can we expect?

March 16, 2015

Since 2006, when the earliest exploit kit (WebAttacker) was made available in the crimeware market, these hack toolkits have become one of the preferred ways for cybercrooks …

Angler exploit kit and domain shadowing: A deadly combination

March 5, 2015

Attackers wielding the infamous Angler exploit kit are increasingly using hijacked registrant accounts to create huge amounts of subdomains for both redirecting victims and …

Compromised cPanel “Account Suspended” pages redirect to exploit kit

February 27, 2015

All Internet users have, at least once in their lives, seen the following “Account Suspended” page: That’s because it’s part and parcel of cPanel, one …

Researchers create automated signature compiler for exploit detection

February 25, 2015

A trio of researchers from Microsoft and University of Erlangen-Nuremberg have created Kizzle, a compiler for generating signatures for detecting exploit kits delivering …

Pwn2Own 2015: New rules, prizes, and potential problems

February 17, 2015

If you intend to participate in the Pwn2Own competition at the CanSecWest 2015 conference on March 18 and 19 in Vancouver, Canada, you would do well to consult with a legal …

Google Play flaw opens Android devices to silent malware installation

February 11, 2015

Android users are in danger of getting malicious apps silently installed on their devices by attackers, warns Rapid7’s Tod Beardsley, technical lead for the Metasploit …

Forbes.com compromised by Chinese cyber spies targeting US firms

February 11, 2015

Forbes.com – the 61st most popular website in the US according to Alexa – has been compromised to redirect certain visitors to websites delivering espionage …

League of Legends exploit allows attackers to access gamers’ accounts

February 3, 2015

A string of hacks has revealed the existence of an exploit targeting League of Legends players, which allows the attackers to open up the game’s store from a web browser …

Adobe updates Flash Player again, plugs 0-day exploited by Angler

January 26, 2015

Adobe made good on its promise to make available by this week a fix for the recently discovered critical zero-day Flash Player vulnerability (CVE-2015-0311) preyed on by the …

Critical Flash Player hole plugged, another still unpatched and exploited

January 23, 2015

Adobe has released an out-of-band update for Flash Player, which fixes a security flaw (CVE-2015-0310) that could be used to circumvent memory randomization mitigations on the …

Critical flaw on over 12M routers allows device hijacking, network compromise

December 19, 2014

A critical, easy to exploit vulnerability that opens more than 12 million SOHO routers around the world to remote compromise has been discovered by Check Point researchers. …