Security News

PayPal, Square vulnerabilities impact mobile point-of-sale machines
2018-08-10 12:52

Researchers have disclosed the existence of point-of-sale bugs which impact mobile payment services worldwide.

Black Hat 2018: Akamai exec discusses IoT vulnerabilities, SQL injections, phishing, and more
2018-08-09 18:16

Dan Patterson spoke with Patrick Sullivan, Akamai's Senior Director of Security Strategy, at Black Hat 2018 about vulnerabilities in IoT devices, SQL injections, DDoS, and other attack vectors.

Irrigation system vulnerabilities highlight physical consequences of cyberattacks
2018-08-09 15:35

A new report from Ben-Gurion University of Negev warns of potential attacks against urban water services.

Qualys and IBM X-Force Red help orgs identify, fix most critical vulnerabilities
2018-08-08 17:28

Qualys announced that IBM X-Force Red will leverage the Qualys Cloud Platform as part of its X-Force Red Vulnerability Management Services (VMS). As part of an expanded relationship, X-Force Red...

OpenEMR vulnerabilities put patients’ info, medical records at risk
2018-08-08 16:03

A slew of vulnerabilities in OpenEMR allowed attackers to access random patients’ health records, view data from a target database, escalate their privileges on the server, execute system...

Samsung Patches Critical Vulnerabilities in SmartThings Hub
2018-07-30 16:24

Samsung has patched a series of critical vulnerabilities in its SmartThings Hub, which could be exploited to execute OS commands or other arbitrary code on vulnerable devices. read more

Office Vulnerabilities Chained to Deliver Backdoor
2018-07-30 11:34

A recently observed malicious campaign is abusing two chained Office documents, each exploiting a different vulnerability, to deliver the FELIXROOT Backdoor, FireEye reports. read more

Samsung SmartThings Hub vulnerabilities allow attackers inside your home
2018-07-27 15:30

Cisco Talos researchers have unearthed 20 vulnerabilities in the Samsung SmartThings Hub that could be leveraged by attackers to monitor, control and interfere with devices within the home. Among...

Same web-based vulnerabilities still prevalent after nine years
2018-07-27 12:15

Analysis of vulnerabilities discovered by NCC Group researchers over the last nine years found that instances of common web-based vulnerabilities have largely refused to fall over during this...

SCADA vulnerabilities in ICS architectures
2018-07-26 15:37

A major challenge in industrial control system architecture involves the dual nature of its underlying technologies. That is, a typical ICS component must have the capability to exchange...