Security News

TCP Vulnerability Haunts Wind River VxWorks Embedded OS (Threatpost)
2015-06-23 14:47

There is a TCP prediction vulnerability in Wind River’s widely deployed VxWorks embedded software that can enable an attacker to disrupt or spoof the TCP connections to and from target devices....

RubyGems Patches Serious Redirection Vulnerability (Threatpost)
2015-06-23 13:55

RubyGems maintainers patched a vulnerability, reported by Trustwave and OpenDNS, that allows RubyGem clients to be redirected to an attacker-controlled gem server.