Security News

Oracle Patches Record 276 Vulnerabilities with July Critical Patch Update (Threatpost)
2016-07-20 13:21

Oracle fixed a record 276 vulnerabilities – more than half of which are remotely exploitable – as part of its July Critical Patch Update on Tuesday afternoon.

Google Chrome Malware Leads to Sketchy Facebook Likes (Threatpost)
2016-07-19 17:13

A researcher shined a light on how malware-laced Chrome extensions can give hackers control over your Facebook feed and more.

Ex-Cardinals Exec Sentenced Four Years for Astros Hack (Threatpost)
2016-07-19 17:02

A U.S. Federal Court sentenced Christopher Correa to almost four years in prison for hacking into a computer system that belongs to the Houston Astros.

Apple Fixes Vulnerabilities Across OS X, iOS, Safari (Threatpost)
2016-07-19 12:16

Apple fixed dozens of vulnerabilities across its software on Monday, including 60 vulnerabilities in its operating system, OS X, and 43 in its mobile operating system, iOS.

CGI Script Vulnerability ‘Httpoxy’ Allows Man-in-the-Middle Attacks (Threatpost)
2016-07-18 22:00

Scripting language vulnerability dubbed HTTPoxy allows for MitM attacks on Red Hat products using PHP, Go and Python.

Researchers Crack Furtim, SFG Malware Connection (Threatpost)
2016-07-18 17:26

Damballa goes deep with Furtim and SFG malware to uncover new details about how the two are connected, distributed and who their targets are.

Two Million Passwords Breached in Ubuntu Hack (Threatpost)
2016-07-18 17:17

Canonical's CEO claims a SQL injection vulnerability led to the hack of Ubuntu's Two million user strong forums.

Juniper Crypto Bug Let Attackers Eavesdrop on Router, Switch Traffic (Threatpost)
2016-07-15 20:20

Juniper patched a crypto security bug that could allow hackers to access the company’s routers, switches and security devices and eavesdrop on sensitive communications.

Patched IE Zero Day Incorporated into Neutrino EK (Threatpost)
2016-07-15 20:16

Attackers behind the Neutrino Exploit Kit didn’t take long to co-op a recently patched Internet Explorer zero-day into its arsenal.

Scan Reveals Hydropower Plants, Other Critical Infrastructure Exposed Online (Threatpost)
2016-07-15 18:09

An Internet scan of the IPv4 address space uncovered more than 100 critical facilities exposed to the public Internet, including hydropower plants in Germany and Italy.