Security News

Lenovo Patches Vulnerabilities in System Update Service (Threatpost)
2015-11-25 15:00

Lenovo has patched two serious vulnerabilities in Lenovo System Update that can allow hackers elevate privileges and guess admin passwords.

MagSpoof: A device that spoofs credit cards, disables chip-and-PIN protection (Help Net Security)
2015-11-25 15:00

Hacker and security researcher Samy Kamkar, who's noted for being the author of the first Web 2.0 worm, creating zombie cookies, and USBdriveby, has now come out with a new project. Dubbed MagSpoof...

Reuse of Cryptographic Keys Exposes Millions of IoT Devices: Study (SecurityWeek)
2015-11-25 14:35

Hilton Worldwide confirms malware on POS targeted payment card info (SC Magazine)
2015-11-25 14:20

9% of all HTTPS hosts and 6% of all SSH hosts on the web use hardcoded private keys embedded in firmware (Reddit)
2015-11-25 13:50

Bug bounties: Which companies offer researchers cash? (ZDNet)
2015-11-25 13:35

Amazon resets customers' potentially compromised passwords (Help Net Security)
2015-11-25 13:32

Has Amazon suffered a breach? We won't know for sure until the company offers more information. So far, we known only what users affected by the data theft/leak incident were told via email: "We re...

Calm at Minneapolis protest site a night after shooting (Yahoo Security)
2015-11-25 13:20

Another root CA cert with key found on Dell's machines (Help Net Security)
2015-11-25 13:10

The main piece of news on Monday was that Dell's desktop PCs and laptops shipped since August 2015 contain a root CA certificate (eDellRoot) complete with the private cryptographic key for it. Attacke...

NSA Lectures on Communications Security from 1973 (Schneier on Security)
2015-11-25 13:06

Newly declassified: "A History of U.S. Communications Security (Volumes I and II)," the David G. Boak Lectures, National Security Agency (NSA), 1973. (The document was initially declassified in...