Security News > 2017 > August

Creating Cyber Plan to Thwart Those Seeking to Sway Elections (InfoRiskToday)
2017-08-11 09:33

Leading the latest edition of the ISMG Security Report: An interview with the head of a new cyber initiative to help political campaigns and local, state and federal election officials safeguard...

Fuji Electric Patches Vulnerabilities in HMI Software (Security Week)
2017-08-11 09:17

Japanese electrical equipment company Fuji Electric has released an update for one of its human-machine interface (HMI) products to address several vulnerabilities. read more

Cyberspies Are Using Leaked NSA Hacking Tools to Spy On Hotels Guests (The Hackers News)
2017-08-11 08:54

An infamous Russian-linked cyber-espionage group has been found re-using the same leaked NSA hacking tool that was deployed in the WannaCry and NotPetya outbreaks—this time to target Wi-Fi...

Command Execution Flaw Affects Several Version Control Systems (Security Week)
2017-08-11 07:19

Several popular version control systems are affected by a potentially serious command execution vulnerability. The developers of the impacted products have released updates this week to patch the...

Cyberattack Leaves Millions Without Mobile Phone Service in Venezuela (Security Week)
2017-08-11 03:14

A massive cyberattack that took down government websites in Venezuela earlier this week also has left seven million mobile phone users without service, the government said Thursday. A group that...

More than 1,000 Spyware Apps Found On Android App Stores (The Hackers News)
2017-08-11 02:00

If you think you are downloading apps from Google Play Store and you are secure, then watch out! Someone has managed to flood third-party app stores and Google Play Store with more than a thousand...

Health Data Security: Making Progress? (InfoRiskToday)
2017-08-10 20:33

CISOs, Analysts React to Findings of 2017 HIMSS Cybersecurity SurveyYet another survey confirms that despite high-profile cyber threats, many healthcare organizations still have relatively skimpy...

Patched Flash Player Sandbox Escape Leaked Windows Credentials (Threatpost)
2017-08-10 19:00

One of yesterday's Flash Player patches was a do-over after the researcher who privately reported the problem earlier this year discovered the original patch incompletely resolved the issue.

Turning an Amazon Echo into an Eavesdropping Device (Schneier on Security)
2017-08-10 18:54

For once, the real story isn't as bad as it seems. A researcher has figured out how to install malware onto an Echo that causes it to stream audio back to a remote controller, but: The technique...

PACER vulnerability allowed hackers to access legal docs while sticking others with the bill (Help Net Security)
2017-08-10 18:45

A CSRF flaw that made it possible for attackers to access court documents on the PACER system while making legitimate users pay for it has finally been plugged. What is PACER? PACER is an...