Security News

China's Web Users Fear Losing Tools to Bypass 'Great Firewall' (Security Week)
2017-08-07 19:02

Enterprising internet users in China fear the tools they use to tunnel through the country's "Great Firewall" may soon disappear, as Beijing tightens its grip on the web. read more

Cisco Fixes DoS, Authentication Bypass Vulnerabilities, OSPF Bug (Threatpost)
2017-08-03 20:30

Cisco fixed two high severity vulnerabilities in two products this week that could have let an attacker trigger a denial of service condition or bypass local authentication.

Siemens Patches Authentication Bypass Flaw in SiPass Server (Threatpost)
2017-07-14 16:37

Siemens patches four vulnerabilities, including a critical authentication bypass flaw, in its SiPass integrated access control server.

Old Kerberos Bypass Flaw Patched in Windows, Linux (Security Week)
2017-07-14 11:04

A 20-year-old authentication bypass vulnerability affecting some implementations of the Kerberos protocol has been patched in Windows, Linux and BSD operating systems. read more

Uber Patches Authentication Bypass Vulnerability on Custom SSO Solution (Threatpost)
2017-07-12 16:36

Uber patched an authentication bypass vulnerability in its homegrown SSO solution that allowed attackers to take over subdomains and steal session cookies.

Authentication Bypass Flaw Patched in BIND, Knot DNS (Security Week)
2017-06-30 09:39

The developers of the BIND and Knot DNS software have released updates to patch a potentially serious vulnerability that can be exploited to bypass authentication mechanisms. read more

GhostHook Attack Can Bypass Windows 10's PatchGuard (Security Week)
2017-06-23 14:37

A newly discovered attack targeting Windows 10’s PatchGuard can bypass the protection and hook a malicious kernel code (rootkit) at the kernel level, CyberArk Labs security researchers warn. read more

First-Ever Data Stealing Malware Found Using Intel AMT Tool to Bypass Firewall (The Hackers News)
2017-06-09 01:27

It's not hard for a well-funded state-sponsored hacking group to break into corporate networks and compromise systems with malware, but what's challenging for them is to keep that backdoor and its...