Security News

Facebook Patches "Memory Disclosure Using JPEG Images" Flaws in HHVM Servers
2019-09-09 08:18

Facebook has patched two high-severity vulnerabilities in its server application that could have allowed remote attackers to unauthorisedly obtain sensitive information or cause a denial of...

HHS Proposes Changes to Substance Abuse Data Disclosures
2019-08-27 16:03

Do the Proposals Go Too Far, or Not Far Enough?The Department of Health and Human Services has issued proposed changes to privacy rules related to the sharing of patient records created by...

News Wrap: Linux Utility Backdoor, Steam Zero Day Disclosure Drama
2019-08-23 16:38

From a backdoor placed in the Webmin utility to vulnerability disclosure drama around zero-days in Valve's Steam gaming clients, Threatpost breaks down this week's top stories.

Intel NUC Firmware Open to Privilege Escalation, DoS and Information Disclosure
2019-06-12 13:25

Intel has patched seven high-severity vulnerabilities in its mini PC NUC kit firmware.

Despite disclosure laws, cybercrime may be widely underreported
2019-06-05 04:45

While attack vectors remain largely the same year over year, attack volume will increase and cybercrime may be vastly underreported, according to the 2019 State of Cybersecurity Study from global...

SEC demands better disclosure for cybersecurity incidents and threats
2019-04-30 05:15

As companies increasingly rely on networked systems and on the Internet, cybersecurity threats have grown. Companies that fall victim to a successful cyberattack incur substantial costs for...

VMware Patches DoS, Information Disclosure Flaws in Graphics Components
2019-04-12 06:07

Patches released this week by VMware for its ESXi, Workstation and Fusion products address “important” denial-of-service (DoS) and information disclosure vulnerabilities affecting graphics...

Facebook's Early, Misguided Call on Breach Disclosure
2019-03-27 12:33

Emails With Aussie Regulator Show Facebook's Thoughts on 'View As' HackShortly after a massive data breach affected up to 50 million accounts last September, Facebook didn't believe the incident...

Australia's Intelligence Agency Publishes its Vulnerability Disclosure Process
2019-03-18 13:49

The Australian Signals Directorate (ASD), Australia's intelligence agency responsible for foreign signals intelligence, has joined America's NSA and the UK's GCHQ in publishing an account of its...

Zero-day Vulnerability Highlights the Responsible Disclosure Dilemma
2019-02-07 17:30

A zero-day vulnerability found in a video-conferencing system and responsibly disclosed led to the response, "Our developers are aware of some known vulnerabilities with the systems, development...