Adobe Patches Critical Vulnerabilities in Shockwave
Adobe has announced it will release a patch for its Shockwave Player today to fix what it deems are critical vulnerabilities in the platform.
Chris Brook
About
"Distrust and caution are the parents of security" - Benjamin Franklin
Five OAuth Bugs Lead to Github Hack
A Russian researcher was able to take five low severity OAuth bugs and string them together to create what he calls a “simple but high severity exploit” in Github.
Hacktivist Collective Takes Credit for Comcast Mail Server Hack
Comcast servers were hacked, yielding a list of the company’s mail servers, passwords and a link to the root file that contains the vulnerability the hackers used.
Google has announced it will retool its bounty program and extend its scope to include all Chrome apps and extensions branded as “by Google.”
Researchers have discovered a relatively new way to distribute malware that relies on reading malicious obfuscated JavaScript code stored in a PNG file’s metadata to trigger iFrame injections.
Cybercriminals have tweaked the way the malware GameOver Zeus is delivered to users’ machines, changing .exe files to .enc files to evade detection.
The OpenBSD Project pushed out a new build of the security suite OpenSSH this week, adding a new private key format, a new transport cipher and fixing 15 bugs in the Secure Shell.
Some USB modems can be leveraged to send malicious SMS messages and carry out spear-phishing attacks – sometimes in conjunction with each other – thanks to a cross site request forgery vulnerability present in the device’s web interfaces.
A VPN bypass bug in Android’s Jelly Bean 4.3 build disclosed last week is also present in Android’s most recent operating system, KitKat 4.4.
Just like it’s done time and time before, the Syrian Electronic Army (SEA) broke into yet another media outlet late last week, hacking a handful of social media accounts belonging to CNN, including seven Twitter accounts and two Facebook accounts.
