Security News > 2017 > November

Privacy Rights in Balance as Supreme Court Hears Cellphone Tracking Case
2017-11-29 04:22

Privacy rights in the digital age face a crucial test Wednesday when the Supreme Court hears a case over police use of a person's location data from cellphone towers. read more

Hackers Exploit Recently Disclosed Microsoft Office Bug to Backdoor PCs
2017-11-29 02:05

A recently disclosed severe 17-year-old vulnerability in Microsoft Office that lets hackers install malware on targeted computers without user interaction is now being exploited in the wild to...

Critical Apple Login Bug Puts macOS High Sierra Systems at Risk
2017-11-29 01:47

A major bug in Apple’s macOS High Sierra gives anyone with physical access to a system running the latest version of the OS root access simply by putting "root" in the user name field.

22-Year-Old Hacker Pleads Guilty to 2014 Yahoo Hack, Admits Helping Russian Intelligence
2017-11-29 00:56

Karim Baratov, a 22-year-old Kazakhstan-born Canadian citizen, has pleaded guilty to hacking charges over his involvement in massive 2014 Yahoo data breach that affected all three billion yahoo...

macOS High Sierra Bug Lets Anyone Gain Root Access Without a Password
2017-11-28 22:24

If you own a Mac computer and run the latest version of Apple's operating system, macOS High Sierra, then you need to be extra careful with your computer. A serious, yet stupid vulnerability has...

IoT, Android Botnets Emerge as Powerful DDoS Tools: Akamai
2017-11-28 22:17

Distributed denial of service (DDoS) attacks observed during the third quarter employed familiar vectors, but a newcomer that made headlines for abusing Android devices is expected to evolve, a...

Leaky AWS Storage Bucket Spills Military Secrets, Again
2017-11-28 22:11

For the second time in ten days, researchers at UpGuard released sensitive data belonging to the United States Defense Department that was stored insecurely online.

How Not to Get Fired For Someone Else's Failure
2017-11-28 21:41

Are You Accountable for Projects You Have No Authority Over?  read more

Tizi backdoor rooted Android devices by exploiting old vulnerabilities
2017-11-28 20:34

Google has discovered and removed from Google Play a number of apps that contained the Tizi backdoor, which installs spyware to steal sensitive data from popular social media applications. Victims...

PowerDNS patches five security holes in widely used nameserver software
2017-11-28 18:11

PowerDNS, the company behing the popular open source DNS software of the same name, has pushed out security updates and patches for its Authoritative Server and Recursor offerings that, among...