Security News > 2015 > May

Rapid7 acquires NT OBJECTives, offers web app scanning (Help Net Security)
2015-05-05 08:12

Rapid7 has acquired NT OBJECTives (NTO), expanding Rapid7’s Threat Exposure Management offering to further meet the needs of business infrastructures. NTO’s application security testing solution an...

Rombertik Malware Can Overwrite MBR if Audited (Threatpost)
2015-05-04 20:26

Cisco Talos reports a new strain of spyware called Rombertik that escalates its anti-detection capabilities by destroying the Master Boot Record if the code is audited.

CVE-2015-3459 - Hospira Lifecare PCA infusion pump (the thing by hospital beds that pump medication into IVs) does not require authentication for Telnet sessions, which allows remote attackers to gain root privileges (Reddit)
2015-05-04 19:04

CRM Isn't Just for Major Companies (IT Toolbox Blogs)
2015-05-04 18:07

Google Updates Password Alert Extension, But Some Bypasses Still Work (Threatpost)
2015-05-04 18:07

For the second time in less than a week, Google has updated its Password Alert extension for Chrome to address a method for bypassing the warning screens that alert users that they’re entering...

Don't Sell That Connected Car (or Home) Just Yet (Forbes)
2015-05-04 18:04

Defenses Outside the Wall (Dark Reading)
2015-05-04 18:04

U.S. Senate Commerce, Science and Transportation Committee chairman requests info on White House breach (SC Magazine)
2015-05-04 18:04

Sally Beauty Investigating Second Data Breach (Threatpost)
2015-05-04 17:26

Sally Beauty is investigating a potential data breach for the second time in as many years, according to a Brian Krebs report.

Google Patches Clickjacking Bug (Threatpost)
2015-05-04 17:13

Google paid out a $1,337 bounty to a researcher who found a clickjacking vulnerability in Google API Explorer.