Security News > 2017 > February

Java, Python FTP Injection Attacks Bypass Firewalls (Threatpost)
2017-02-23 14:19

Newly disclosed FTP injection vulnerabilities in Java and Python that are fueled by rather common XML External Entity (XXE) flaws allow for firewall bypasses.

Passages: Secure virtual browser for malware isolation (Help Net Security)
2017-02-23 13:30

Over 90% of undetected attacks come through the web. In this podcast recorded at RSA Conference 2017, Lance Cottrell, Chief Scientist at Ntrepid, talks about Passages, a secure virtual browser...

Publicly Disclosed Windows Vulnerabilities Await Patches (Threatpost)
2017-02-23 13:00

Microsoft's delayed release of its February security bulletins leaves users exposed to a pair of already publicly disclosed vulnerabilities.

New macOS ransomware masquerades as software cracking tools (Help Net Security)
2017-02-23 13:00

New crypto ransomware dubbed Filecoder is stalking macOS users, ESET researchers warn. Masquerading as an application for cracking/patching legal copies of Adobe Premiere Pro and Microsoft Office...