Security News

E-commerce web apps vulnerable to hijacking, database compromise (Help Net Security)
2016-02-18 21:00

High-Tech Bridge researchers have published details and PoC exploit code for several serious vulnerabilities in Osclass, osCmax, and osCommerce, three popular open source e-commerce web apps....

Critical Glibc flaw opens Linux distros, other software and devices to compromise (Help Net Security)
2016-02-17 22:01

A critical bug has been found to open an unimaginable number of computers, networking and other connected devices to attacks that can result in complete system compromise. Discovered independently...

Flaw in Sparkle Updater for Mac opens users of popular apps to system compromise (Help Net Security)
2016-02-10 13:34

A security engineer has recently discovered a serious vulnerability in Sparkle, the widely used open source software update framework for Mac applications, that could be exploited by attackers to moun...

Fake Amazon survey-for-money offer leads to account compromise (Help Net Security)
2016-02-05 09:10

Amazon users are being targeted with a clever phishing email impersonating the retail giant. "As a valued customer we would like to present you with an opportunity to make a quick buck," says the e...