vulnerability

Intel patches MiTM flaw in its Driver Update Utility

January 20, 2016

Intel has fixed a remotely exploitable vulnerability (CVE-2016-1493) in the Intel Driver Update Utility which could be used by a man-in-the-middle attacker to corrupt …

Good practice guide on disclosing vulnerabilities

January 19, 2016

ENISA published a good practice guide on vulnerability disclosure, aiming to provide a picture of the challenges the security researchers, the vendors and other involved …

LostPass: A worryingly simple phishing attack aimed at LastPass users

January 18, 2016

Security researcher (and Praesido CTO) Sean Cassidy has demonstrated at ShmooCon how easy it can be for hackers to steal LastPass users’ email, password, and two-factor …

OS X’s Gatekeeper bypassed again

January 15, 2016

Do you remember when, last October, Synack director of research Patrick Wardle found a simple way to evade OS X’s Gatekeeper defense mechanism by bundling up a …

Flaw allows malicious OpenSSH servers to steal users’ private SSH keys

January 15, 2016

Qualys researchers have discovered two vulnerabilities in the popular OpenSSH implementation of the secure shell protocol, one of which (CVE-2016-0777) could be exploited by …

Cheap web cams can open permanent, difficult-to-spot backdoors into networks

January 14, 2016

They might seems small and relatively insignificant, but cheap wireless web cams deployed in houses and offices (and connected to home and office networks) might just be the …

Cisco kills hardcoded password bug in Wi-Fi access points

January 14, 2016

Along with fixes for a number of older vulnerabilities in Cisco IOS and IOS XE software, the Cisco IOS Software Common Industrial Protocol, and the OpenSSL package …

Your smartwatch can give away your payment card’s PIN code

January 13, 2016

Smartwatches can be a perfectly useful and handy wearable device for some users, but it’s good to keep in mind that using them might mean opening yourself to an …

Fortinet says backdoor found in FortiOS is “a management authentication issue”

January 13, 2016

Fortinet, the company whose enterprise network security offerings include the popular FortiGate firewall platform, has issued a statement regarding a security issue that has …

Google researchers finds critical flaws in Trend Micro AV solution

January 12, 2016

If you are using Trend Micro’s Maximum Security 10 solution for Windows, you might want to update it to the latest available version as soon as possible. If you …

Drupal moves to fix flaws in update process

January 11, 2016

After IOActive researcher Fernando Arnaboldi publicly revealed three crucial vulnerabilities in Drupal’s update process last Thursday, the Drupal Security Team published …

General Motors invites hackers to report security flaws in their cars