About
“We are what we pretend to be, so we must be careful about what we pretend to be.” ― Kurt Vonnegut
The popular cloud storage service Dropbox is reportedly undercutting the efficacy of access space layout randomization (ASLR) by failing to enable that feature within the dynamic link libraries (DLLs) it injects into other applications.
Java 7U40 is available and includes new local security policy that gives admins the ability to choose which apps can access a particular version of Java.
If you haven’t heard, Apple unveiled two new iterations of the iPhone at one of the Cupertino company’s typically grandiose product events yesterday. As usual, there was plenty of hype to go around, but the biggest change as far as security is concerned is the addition of a fingerprint scanner on the high-end new iPhone 5S.
A new phishing campaign is disseminating malicious links with emails purporting to come from CNN saying that the United States has initiated military strikes against the embattled regime of Syrian President Bashar al Assad.
Online advertising firms will waste $9.5 billion this year advertising to bots guaranteed to buy nothing, according to numbers from Solve Media.
Researchers have developed a wearable device that measures electrocardiogram readings, which are unique to every person, that the researchers hope could be used as an alternative to passwords for authentication.
Recent versions of the mobile application for Yahoo’s popular fantasy football service are vulnerable to a session hijack attack.
Packet Storm made public today a proof-of-concept exploiting a known and patched heap buffer overflow vulnerability in Apple’s Safari browser.
Cisco issued advisories warning users of vulnerabilities in the company’s Adaptive Security Appliance, IOS XR software, unified computing system and wireless LAN controllers.
Italian security researchers report that as many as 800,000 Chrome users had browser sessions hijacked after falling victim to phony Facebook messages that eventually led users to malware posing as a video plug-in.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
