Two critical bugs and more malicious apps make for a bad week for Android
(credit: Ron Amadeo) It was a bad week for millions of Android phone users. Two critical vulnerabilities were disclosed but remain unpatched in a large percentage of devices, while, separately,...
View ArticleVuln: GNU glibc CVE-2015-1781 Multiple Buffer Overflow Vulnerabilities
GNU glibc CVE-2015-1781 Multiple Buffer Overflow Vulnerabilities
View ArticleVuln: GNU glibc CVE-2015-8779 Stack Buffer Overflow Vulnerability
GNU glibc CVE-2015-8779 Stack Buffer Overflow Vulnerability
View ArticleVuln: Wireshark Multiple Denial of Service Vulnerabilities
Wireshark Multiple Denial of Service Vulnerabilities
View ArticleOngoing IMAP Scan, Anyone Else?, (Sat, Sep 10th)
Im operating a mail server which handles email flows from multiple domains (20 domains). The server is under a massive IMAPS (%%port:993%%) scan for a few days. More details about the ongoing attack:...
View ArticleGetting Ready for macOS Sierra: Upgrade Securely, (Sun, Sep 11th)
Downloadable PDF with screen shots Apple is expected to release the next version of its operating system on or around September 20th, 2016 [1]. The current version of OS X, 10.11, or also known as El...
View ArticleISC Stormcast For Monday, September 12th 2016...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleVuln: libarchive CVE-2016-4809 Denial Of Service Vulnerability
libarchive CVE-2016-4809 Denial Of Service Vulnerability
View ArticleVuln: QEMU CVE-2016-7170 Denial of Service Vulnerability
QEMU CVE-2016-7170 Denial of Service Vulnerability
View ArticleThousands of infected FTP servers net attackers $88k in cryptocurrency
Enlarge (credit: Pander) Attackers are draining the CPU and power resources of thousands file transfer protocol servers by infecting them with malware that surreptitiously mints the relatively new...
View ArticleVuln: Oracle MySQL CVE-2016-6662 Remote Code Execution Vulnerability
Oracle MySQL CVE-2016-6662 Remote Code Execution Vulnerability
View ArticleVuln: Oracle MySQL CVE-2016-6663 Unspecified Security Vulnerability
Oracle MySQL CVE-2016-6663 Unspecified Security Vulnerability
View ArticleVuln: EMC Documentum D2 CVE-2016-6644 Authentication Bypass Vulnerability
EMC Documentum D2 CVE-2016-6644 Authentication Bypass Vulnerability
View ArticleHands-on: Blue Hydra can expose the all-too-unhidden world of Bluetooth
The SENA UD100 Bluetooth adapter, plus a slightly larger antenna, allows Blue Hydra to peer deep into the Bluetooth world. Sean Gallagher My new neighbor was using AirDrop to move some files from his...
View ArticleIf it's Free, YOU are the Product, (Tue, Sep 13th)
This is a commonly used phrase, usually when describing free products on the internet (often social media sites). When my wife asked me to convert a PDF to a DOCX file, I thought Id test this proverb...
View ArticleISC Stormcast For Tuesday, September 13th 2016...
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
View ArticleBugtraq: Open-Xchange Security Advisory 2016-09-13
Open-Xchange Security Advisory 2016-09-13
View ArticleBugtraq: Open-Xchange Security Advisory 2016-09-13 (2)
Open-Xchange Security Advisory 2016-09-13 (2)
View ArticleVuln: FENIKS PRO ElNet LT Energy & Power analyzer Multiple Authentication...
FENIKS PRO ElNet LT Energy & Power analyzer Multiple Authentication Bypass Vulnerabilities
View ArticleBugtraq: Multiple DoS vulnerabilities in libosip2-4.1.0
Multiple DoS vulnerabilities in libosip2-4.1.0
View Article