vulnerability

Cisco splats router bug that can lead to persistent DoS

April 16, 2015

Cisco has patched a vulnerability that affects Cisco ASR 9000 Series Aggregation Services Routers and can be exploited by a remote, unauthenticated attacker to effectively …

New Java vulnerabilities remotely executable without login

April 16, 2015

It is extremely important that enterprises urgently patch their Java Runtime Environments (JREs) and (Java Development Kits) JDKs since 14 vulnerabilities addressed in this …

Adobe fixes Flash Player zero-day exploited in the wild

April 15, 2015

Adobe released a new version of Flash Player (17.0.0.169) for Windows and Macintosh, and for Linux (11.2.202.457). These security updates fix a host of critical …

18-year-old bug can be exploited to steal credentials of Windows users

April 14, 2015

A new technique for exploiting an 18-year-old bug in Windows Server Message Block (SMB), which would allow attackers to intercept user credentials, had been uncovered by …

Attackers can easily crack Belkin routers’ WPS PINs

April 13, 2015

A considerable number of routers manufactured by US-based Belkin use a flawed method for creating PINs for Wi-Fi Protected Setup (WPS), making them easily discoverable by …

TorLocker victims can decrypt most files without paying ransom

April 10, 2015

Crypto-ransomware rarely means good news for targets, but when it comes to TorLocker malware (detected as Trojan-Ransom.Win32.Scraper by Kaspersky Lab), the victims can …

Latest OS X update closes backdoor that allows root access

April 10, 2015

On Thursday Apple released another batch of updates for a variety of its products. The security update for OS X Yosemite (10.10.3) includes a fix for a four-year-old …

MitM, DoS bugs in Network Time Protocol squashed

April 9, 2015

Two vulnerabilities affecting Network Time Protocol (NTP), which is used for synchronizing clocks of computer systems, have been patched and made available in the latest …

IoT devices facilitate robbery, stalking and cybercrime

April 8, 2015

The foundation of the Internet of Things (IoT) – the devices themselves plus their associated mobile applications and cloud services – are often not designed with …

Firefox loses opportunistic encryption feature due to critical flaw

April 7, 2015

Less than a week after it made Firefox 37 available for download, Mozilla is pulling one of the security features it implemented. Mozilla is urging users to update again, to …

Critical flaw in WiFi routers puts hotels and millions of guests at risk

March 27, 2015

A critical vulnerability in ANTlabs InnGate devices, a popular Internet gateway for visitor-based networks and commonly installed in hotels and convention centers, has been …

Crowdsourcing your bug bounty program