Security News

Juniper Hotfixes Shut Down IPv6 DDoS Vulnerability (Threatpost)
2016-08-10 18:09

Juniper Networks announced patches for a serious vulnerability in the handling of IPv6 packets that is says could leave its Junos OS and JUNOSe routers open to a distributed denial of service...

Serious TCP Bug in Linux Systems Allows Traffic Hijacking (Threatpost)
2016-08-10 16:55

A serious vulnerability in the TCP implementation in Linux systems can be used identify hosts communicating over the protocol and attack that traffic.

Putting Apple Bug Bounty Rewards in Perspective (Threatpost)
2016-08-10 15:00

Competing zero-day acquisition programs pay out much more than Apple’s new bug bounty program, but researchers used to submitting bugs gratis to Apple aren’t complaining much.

Windows 10 Attack Surface Grows with Linux Support in Anniversary Update (Threatpost)
2016-08-10 14:00

Support for Linux binaries in a new Windows 10 Anniversary Update feature expands the OS' attack surface, experts said.

Windows PDF Library Flaw Puts Edge Users at Risk for RCE (Threatpost)
2016-08-09 18:59

Microsoft today released nine security bulletins as part of its August 2016 Patch Tuesday updates.

A Month Without Adobe Flash Player Patches (Threatpost)
2016-08-09 16:50

Adobe rolled out patches for four vulnerabilities in Adobe Experience Manager, the first time since January its monthly patch release cycle has not included a Flash Player security update.

Misuse of Language:  ‘Cyber’; When War is Not a War, and a Weapon is Not a Weapon (Threatpost)
2016-08-09 13:00

Threatpost Op-Ed is a regular feature where experts contribute essays and commentary on what’s happening in security and privacy. Today’s contributors are Dave Dittrich and Katherine Carpenter....

Breach Forces Password Change on Oracle MICROS PoS Customers (Threatpost)
2016-08-08 21:21

Oracle warns its MICROS point-of-sale system customers to change account passwords after malware was discovered on a support site that was infecting users.

ProjectSauron APT On Par With Equation, Flame, Duqu (Threatpost)
2016-08-08 17:40

ProjectSauron, an APT attack platform, has been used since 2011 to target critical government, financial and communications organizations in a number of countries.

Quadrooter Flaw in Qualcomm Chips Puts 900M Android Devices At Risk (Threatpost)
2016-08-08 15:11

Researchers at Check Point said the Quadrooter flaw that leaves 900 million devices open to attack will not be fixed until September.