Security News

Supermicro servers fixed after insecure firmware updating discovered
2018-09-10 12:16

Researchers have sounded a warning about the security of Baseboard Management Controllers (BMCs) - a critical component that datacentres depend on to manage servers.

Supermicro wraps crypto-blanket around server firmware to hide it from malware injectors
2018-09-07 07:07

BMC software updates to check code signatures after researchers hit red alert Researchers claim to have discovered an exploitable flaw in the baseboard management controller (BMC) hardware used by...

Premera Blue Cross hacker victims claim insurer trashed server to hide data-slurp clues
2018-09-06 01:10

Cover-up – or just admins following usual upgrade cycle? Health-insurance biz Premera Blue Cross has been accused of deliberately knackering one of its computers to cover up details of a...

IDERA updates toolset for SQL Server security and compliance
2018-09-05 14:30

IDERA announced the latest release of its SQL Security Suite, including SQL Secure and SQL Compliance Manager, with support for industry regulations. As data protection regulations gain traction...

Mikrotik routers pwned en masse and send network data to mysterious server
2018-09-04 20:50

Researchers uncover botnet pouncing on security holes More than 7,500 Mikrotik routers have been compromised with malware that logs and transmits network traffic data to an unknown control server.…

FBI: No Evidence Clinton Server Hacked Despite Trump Tweet
2018-08-29 19:35

WASHINGTON (AP) — The FBI said Wednesday that it has no evidence Hillary Clinton's private email server was compromised even though President Donald Trump tweeted a news report that alleged the...

Now that's a fortune cookie! Facebook splats $5k command-injection bug in one of its servers
2018-08-24 21:51

Find flaw, report flaw, fix flaw, get paid. Bish, bash, bosh Facebook has patched a remote-code execution flaw discovered in one of its servers.…

New Apache Struts RCE Flaw Lets Hackers Take Over Web Servers
2018-08-22 14:18

Semmle security researcher Man Yue Mo has disclosed a critical remote code execution vulnerability in the popular Apache Struts web application framework that could allow remote attackers to run...

Smart homes can be easily hacked via unsecured MQTT servers
2018-08-20 15:53

The Internet of Things is full of security holes, and the latest one has been pointed out by Avast researcher Martin Hron: unsecured MQTT servers. What is MQTT? The Message Queuing Telemetry...

16-Year-Old Teen Hacked Apple Servers, Stole 90GB of Secure Files
2018-08-17 12:18

Well, there's something quite embarrassing for Apple fans. Though Apple servers are widely believed to be unhackable, a 16-year-old high school student proved that nothing is impossible. The...