Lenovo scrambling to get a fix for BIOS vuln
2016-07-04
Is it a bug or is it a backdoor? Lenovo, and possibly other PC vendors, is exposed to a UEFI bug that can be exploited to disable firmware write-protection. If theRead More →
Magento – Re-Installation & Account Hijacking Vulnerabilities
2016-07-02
Before discovering my latest Magento RCE, I’ve found two different vulnerabilities, both resulting in the complete compromise of customer data and/or the server. As they are far less complicated, I’mRead More →
Android’s full-disk encryption just got much weaker—here’s why
2016-07-02
Unlike Apple’s iOS, Android is vulnerable to several key-extraction techniques. Privacy advocates take note: Android’s full-disk encryption just got dramatically easier to defeat on devices that use chips from semiconductor makerRead More →
Google Finds 16 Bugs, 2 Zero-Days, in Windows Kernel Font Handling
2016-07-01
The two zero-days were fixed in the summer of 2015.Project Zero researchers revealed this week that they helped Microsoft patch 16 security issues relating to how font processing operations areRead More →
FOXIT PATCHES 12 VULNERABILITIES IN PDF READER
2016-07-01
Foxit patched a dozen vulnerabilities in its PDF reader software this week, more than half of which could allow an attacker to directly execute arbitrary code on vulnerable installations ofRead More →
High-severity bugs in 25 Symantec/Norton products imperil millions
2016-06-30
If you use a Symantec or Norton product, now would be a good time to update. Much of the product line from security firm Symantec contains a raft of vulnerabilities thatRead More →
Clever Attack Uses the Sound of a Computer’s Fan to Steal Data
2016-06-29
IN THE PAST two years a group of researchers in Israel has become highly adept at stealing data from air-gapped computers—those machines prized by hackers that, for security reasons, areRead More →
APPLE LEAVES IOS 10 BETA KERNEL UNENCRYPTED: PROS AND CONS
2016-06-29
Last week Apple cleared the air as to whether or not it intentionally released an unencrypted version of its iOS 10 beta kernel to the developer community, stating the moveRead More →
The Infamous Nuclear Exploit Kit Shuts Down
2016-06-28
In a seeming response to the recent Check Point investigative report, the Nuclear Exploit Kit shut down its entire infrastructure and ceased operation. Background The Nuclear Exploit Kit, one ofRead More →
Widespread Attack on Office 365 Corporate Users with Zero-day Ransomware Virus
2016-06-28
Millions of Office 365 business users likely effected. Starting June 22 at 6:44 a.m. UTC, Avanan’s Cloud Security Platform started to detect a massive attack against its customers that were usingRead More →
