Security News

Apple Patches Remote ‘Invoice Vulnerability’ in iTunes, App Store (Threatpost)
2015-07-28 15:48

Apple recently patched a serious issue in its App Store and iTunes Store web apps that could have let a remote attacker inject their own malicious script code into invoices that come from Apple.

New Phishing Campaign Targets Google Credentials (Threatpost)
2015-07-28 14:49

Researchers have found a new phishing campaign leveraging Google Drive in order to steal credentials.

NSA Says It Will End Access to 215 Records in November (Threatpost)
2015-07-28 13:25

The National Security Agency says that once its legal authority to conduct Section 215 bulk telephone surveillance ends on Nov. 29, its analysts no longer will be allowed to access the database...

Valve Patches Password Reset Vulnerability in Steam (Threatpost)
2015-07-27 18:06

Valve Software has patched a vulnerability in the Steam gaming platform that enabled account hijacking through its password reset mechanism.

PHP File Manager Riddled With Vulnerabilities, Including Backdoor (Threatpost)
2015-07-27 16:39

Multiple critical vulnerabilities have existed, some for nearly five years, in PHP File Manager, a web-based file manager used by several high profile corporations.

Pair of Bugs Open Honeywell Home Controllers Up to Easy Hacks (Threatpost)
2015-07-27 14:50

The accumulation of automation and Internet-connected devices in many homes these days has led observers to coin the term smart homes. But as researchers take a closer look at the security of...

Android Stagefright Flaws Put 950 Million Devices at Risk (Threatpost)
2015-07-27 13:58

Vulnerabilities in Stagefright, which processes media formats in Android, put 950 million devices at risk to remote attacks.

Census Bureau Says Breach Didn’t Compromise Sensitive Data (Threatpost)
2015-07-27 13:22

Officials at the United States Census Bureau say that the attackers who compromised one of the bureau’s databases last week did not get access to any confidential information, but only data such...

Stakeholders Argue Against Restrictive Wassennaar Proposal (Threatpost)
2015-07-24 17:29

The commenting period regarding the Wassenaar Arrangement expired on Monday but the echo chamber around the largely maligned proposal continues to reverberate.

Fiat Chrysler Recalls 1.4 million Cars After Software Bug is Revealed (Threatpost)
2015-07-24 15:45

A few days after issuing a patch and reassuring owners that the attack that shut down the transmission and other systems remotely on a Jeep was not a huge risk, Fiat Chrysler has decided to recall...