Security News

E-commerce web apps vulnerable to hijacking, database compromise (Help Net Security)
2016-02-18 21:00

High-Tech Bridge researchers have published details and PoC exploit code for several serious vulnerabilities in Osclass, osCmax, and osCommerce, three popular open source e-commerce web apps....

Huge number of Mac apps vulnerable to hijacking, and a fix is elusive (ArsTechnica)
2016-02-09 20:15

Week in review: The death of Java plugin, Magento fixes e-store hijacking flaw, cybercriminals targeting healthcare data (Help Net Security)
2016-02-01 06:54

Here's an overview of some of last week's most interesting news and articles: There's no turning back: Say goodbye to the perimeter If you’ve been following the announcements from this year’s Co...

Cisco plugs hole in firewall devices that could lead to device hijacking (Help Net Security)
2016-01-28 11:00

Cisco has released a firmware update that plugs a critical, easy-to-exploit vulnerability that could allow a remote attacker to take control of the company's RV220W Wireless Network Security Firewall ...

Magento plugs XSS holes that can lead to e-store hijacking, patch immediately! (Help Net Security)
2016-01-25 09:18

Last week, Magento released a very important bundle of patches for their eponymous e-commerce platform that should be implemented as soon as possible. The bundle plugs a number of critical vulnerab...

How email in transit can be intercepted using DNS hijacking (Help Net Security)
2016-01-18 08:00

This article looks at how an attacker can intercept and read emails sent from one email provider to another by performing a DNS MX record hijacking attack. While our research on the state of email ...

Hijacking Verizon FiOS Accounts FIXED (Reddit)
2016-01-10 21:55

An old email from Tsutomu Shimomura on January 25 1995 describing Kevin Mintnick's TCP session hijacking attack. (Reddit)
2016-01-08 22:40

DLL Hijacking Just Wont Die (Reddit)
2015-12-28 01:47

Critical ScreenOS bugs allow undetectable decryption of VPN connections, device hijacking (Help Net Security)
2015-12-18 10:00

Juniper Networks has discovered and patched a critical, high-impact vulnerability affecting ScreenOS on its NetScreen devices, and is advising customers to update their systems "with the highest prior...