Security News

Millions of IoT Devices Vulnerable to Z-Wave Downgrade Attacks, Researchers Claim
2018-05-25 19:27

Millions of IoT devices based on the Z-Wave wireless protocol are vulnerable to a downgrade attack during pairing sessions.

Electron patched the patch after researcher broke the patch
2018-05-25 02:55

January's fix had blacklist flaw, now fixed In an update last week, the developers of the Electron shipped a patch to their January patch, and now, an infosec researcher has explained why.…

Researchers unearth a huge botnet army of 500,000 hacked routers
2018-05-23 16:03

More than half a million routers and storage devices in dozens of countries have been infected with a piece of highly sophisticated IoT botnet malware, likely designed by Russia-baked...

Researchers hack BMW cars, discover 14 vulnerabilities
2018-05-23 15:20

Keen Security Lab researchers have discovered fourteen vulnerabilities affecting a variety of BMW car models. The flaws could be exploited to gain local and remote access to infotainment (a.k.a...

Researchers Say More Spectre-Related CPU Flaws On Horizon
2018-05-22 21:20

Yet another speculative execution side channel flaw has been disclosed in processors - and security experts warn that more may be out there.

Researcher Earns $36,000 for Google App Engine Flaws
2018-05-21 12:55

An 18-year-old researcher has earned more than $36,000 from Google after finding a critical remote code execution vulnerability related to the Google App Engine. Part of the Google Cloud offering,...

The ethical and legal dilemmas of threat researchers
2018-05-21 11:40

Threat intelligence is mainstreaming into a de-facto everyday tool of cyber-defense. But all that intelligence must be collected, analyzed, and prepared by someone. Enter threat researchers, the...

Careless researchers expose millions of Facebook users’ sensitive data
2018-05-14 21:29

If you needed another reason to stop sharing intimate information with apps on Facebook or Facebook itself, consider this newest revelation: academics at the University of Cambridge have been...

Uninstall or Disable PGP Tools, Security Researchers Warn
2018-05-14 10:48

Exploitable Vulnerabilities Could Reveal Plaintext of Encrypted EmailsEuropean computer security researchers say they have discovered vulnerabilities that relate to two techniques used to encrypt...