Security News

Facebook, Researcher Spar Over Instagram Vulnerabilities (Threatpost)
2015-12-17 22:19

Facebook has threatened a security researcher with legal and/or criminal action over a number of Instagram vulnerabilities that allowed the researcher to access SSL and other private keys, as well...

Pro PoS Malware Simple, Less Sophisticated Than Initially Thought (Threatpost)
2015-12-17 20:56

Pro PoS, a strain of point of sale malware that began making the rounds on underground markets late last month, is easy to use, but less sophisticated than initial reports suggested.

Critical Flaws Found in Network Management Systems (Threatpost)
2015-12-17 19:05

Rapid7 has reported and disclosed a half-dozen XSS and SQL injection flaws in popular network management systems, all of which can be reached via SNMP.

MacKeeper User Database an Open Book (Threatpost)
2015-12-15 13:43

Thirteen million MacKeeper user records were found in a publicly accessible database.

Attacks Ramp Up Against Joomla Zero Day (Threatpost)
2015-12-15 09:55

Researchers at Sucuri said attacks against a zero-day vulnerability in Joomla, which has been patched, have accelerated since the weekend.

Twitter Warns Some users of Nation-State Attacks (Threatpost)
2015-12-14 14:26

Some Twitter users are being warned that their accounts may be involved in state-sponsored hacks.

Banking Malware Moving Over Facebook Hosted in Cloud (Threatpost)
2015-12-10 17:00

Zscaler has uncovered new Spy Banker campaigns moving over Facebook where the banking malware is hosted on a Google Cloud Server.

FBI on Encryption: ‘It’s A Business Model Question’ (Threatpost)
2015-12-10 12:58

FBI Director James Comey testified before a Senate committee that technology companies should consider changing their business models around encryption.

Internet Root Name Servers Survive Unusual DDoS Attack (Threatpost)
2015-12-09 18:50

An unusual DDoS amplification attack was carried out 10 days ago against many of the Internet’s 13 root name servers, the authoritative servers used to resolve IP addresses.

Cisco Warning of Vulnerabilities in Routers, Data Center Platforms (Threatpost)
2015-12-09 18:34

Cisco is warning users this week that several of its products -- routers, gateways, data centers, and the like -- suffer from vulnerabilities.