WhatsApp, Telegram Vulnerabilities Exposed Users to Account Takeover
WhatsApp and Telegram patched vulnerabilities in the last week that could have let an attacker take over a user’s account.
Chris Brook
About
"Distrust and caution are the parents of security" - Benjamin Franklin
Google Eliminates Android Adfraud Botnet Chamois
Google removed a family of malicious apps, Chamois, from its Play marketplace recently that were found manipulating ad traffic.
Adobe Fixes Six Code Execution Bugs in Flash
Adobe fixed seven vulnerabilities, six that could lead to code execution, in Flash Player on Tuesday.
SAP patched a critical vulnerability in its cloud-based business platform HANA today that if exploited, could allow for a full system compromise, without authentication.
Researchers said last week they came across a malicious function that was snuck into a module in Magento in order to steal credit card information.
Mike Mimoso talks to Cody Pierce, director of vulnerability research and prevention with Endgame, at RSA Conference 2017 about how attackers are changing their techniques in the face of mitigations.
Mike Mimoso and Chris Brook discuss the news of the week including a rash of new IP camera backdoors, James Comey’s talk at Boston College, hacking back vs. active defense, and the DOJ dropping one of its Playpen cases.
A researcher claims that almost 200,000 shoddily made IP cameras could be an easy target for attackers looking to spy, brute force them or steal their credentials.
The latest version of Firefox expands non-secure HTTP warnings, enables SHA-1 deprecation by default, and removes support for NPAPI.
A researcher claims a backdoor exists in several DVRs and IP-enabled cameras manufactured by Dahua.
