vulnerability

Seagate wireless hard drives open wide to attack

September 7, 2015

Several Seagate wireless hard-drives have been found to be affected by multiple vulnerabilities, the CERT Coordination Center of the Software Engineering Institute at Carnegie …

Hacker had access to sensitive info about Firefox bugs for over a year

September 7, 2015

Mozilla has announced on Friday that an attacker managed to access security-sensitive information about a considerable number of (at the time) unpatched Firefox …

Cisco squashes DoS bug in its unified infrastructure software

September 4, 2015

Cisco has released a patch for a serious remotely exploitable vulnerability affecting its Integrated Management Controller (IMC) Supervisor and Cisco UCS Director …

PayPal stored XSS vulnerability exposed

September 3, 2015

Bitdefender researchers have located a stored XSS vulnerability in PayPal that leaves the e-payment service open for hackers to upload maliciously crafted files, capable of …

Vulnerable gambling apps put corporate data at risk

September 3, 2015

Based on an analysis of hundreds of thousands of scans of mobile apps installed in actual corporate environments, Veracode found that the average global enterprise has …

Popular Android AppLock app full of gaping security holes

September 2, 2015

AppLock, by DoMobile, is a very popular Android app for limiting access to certain content on the device (text messages, photos, videos, etc.). The user decides what content …

JetAudio and JetVideo media player vulnerability allows arbitrary code execution

August 28, 2015

An arbitrary code execution in the JetAudio Basic (v8.1.3) and JetVideo media players for Windows allows potential attackers to craft a malicious .asf file that could …

Security flaws could allow attackers to steal over 100 different cars

August 19, 2015

Since 2012, a trio of European researchers knew that the Megamos Crypto transponder – used in a over 100 cars manufactured by Audi, Ferrari, Fiat, Cadillac, Volkswagen …

Microsoft issues emergency patch for IE flaw exploited in the wild

August 19, 2015

Microsoft has pushed out an emergency out-of-band Internet Explorer update, which fixes a critical memory corruption vulnerability (CVE-2015-2502) that is being actively …

BitTorrent clients can be made to participate in high-volume DoS attacks

August 17, 2015

A group of researchers have discovered a new type of DoS attack that can be pulled off by a single attacker exploiting weaknesses in the BitTorrent protocol family.The …

Google’s Android Stagefright patch is flawed

August 14, 2015

The security update released by Google last week does not provide a complete defense against attackers taking advantage of the recently unearthed Stagefright Android …

Researchers get $100k for detecting emerging class of C++ bugs

August 13, 2015

Facebook has awarded $100,000 to a team of researchers from Georgia Tech for their discovery of a new method for identifying “bad-casting” vulnerabilities that …