Security News > 2016 > December

Buffer Overflow in BSD libc Library Patched (Threatpost)
2016-12-07 19:55

The BSD libc library was updated recently to address a buffer overflow vulnerability that could have allowed an attacker to execute arbitrary code.

80 Sony IP camera models come with backdoors (Help Net Security)
2016-12-07 18:16

80 different models of Sony IPELA Engine IP Cameras have multiple backdoors that can be misused by attackers to take control of the device, disrupt its functionality, add it to a botnet, and more....

Critical Vulnerability Patched in Roundcube Webmail (Threatpost)
2016-12-07 15:00

Open source webmail provider Roundcube was patched against a vulnerability that could be trivially exploited to run code on servers or access email accounts.

WWW Malware Hides in Images (Schneier on Security)
2016-12-07 14:06

There's new malware toolkit that uses stegaography to hide in images: For the past two months, a new exploit kit has been serving malicious code hidden in the pixels of banner ads via a...

Over 400,000 phishing sites have been observed each month during 2016 (Help Net Security)
2016-12-07 13:30

84 percent of phishing sites observed in 2016 existed for less than 24 hours, with an average life cycle of under 15 hours. The data collected by Webroot shows that today’s phishing attacks have...

The early IoT gets the worm (Help Net Security)
2016-12-07 13:15

Five days after the start of World War I, Sir Edward Grey, British Foreign Secretary, remarked to a close friend, “The lights are going out all over Europe, we shall not see them lit again in our...

Hackers Gamify DDoS Attacks With Collaborative Platform (Threatpost)
2016-12-07 13:00

A hacking group is luring participants to use a DDoS platform where they can compete with peers to earn redeemable points exchangeable for hacking tools and click-fraud software.

Top 4 global security threats businesses will face in 2017 (Help Net Security)
2016-12-07 13:00

The Information Security Forum (ISF) has announced their outlook for the top four global security threats that businesses will face in 2017. “The pace and scale of information security threats...

Corporate data left unprotected in the wild (Help Net Security)
2016-12-07 12:45

A new survey conducted by YouGov has highlighted the risks to corporate data from poor encryption, and employee use of unauthorised and inadequately protected devices. The survey of British office...

Governments are behind on data encryption in the public cloud (Help Net Security)
2016-12-07 12:30

A HyTrust survey of 59 government and military organizations found that nearly 20 percent of those respondents do not implement data security or encryption solutions in the public cloud....