Critical DoS Bug in Node.js, io.js Patched
Developers at Node.js over the weekend released a critical update to the runtime environment that addresses a bug that could be used to cause denial of service attacks.
Chris Brook
About
"Distrust and caution are the parents of security" - Benjamin Franklin
Command Injection Vulnerabilities Plague IP Enabled AirLive Cameras
Core Security disclosed information on command-injection vulnerabilities found in a number of AirLive IP-enabled cameras after repeated attempts to disclose to the manufacturer were ignored.
June Harvard Breach Hit Multiple Schools
Harvard University warned students of a data breach that may have exposed school network and email logins.
Pinterest recently fixed an issue in the API of its web app that could have allowed remote attackers to compromise emails and carry out session hijacking and phishing attacks.
The Office of Personnel Management announced yesterday that it is temporarily suspending the system it uses to conduct government background checks.
Authorities in six different countries worked together last week to take down a cybercrime ring which ultimately infected tens of thousands of computers with Zeus and SpyEye malware and made off with roughly $2.25 M dollars from banks in the process.
An engineer has come up with a new way to help combat BeEF, or browser exploit framework attacks.
An undisclosed number of travelers who use Hotels.com may have been victims of a phishing scheme.
Facebook have added the ability for organizations to detect if their OS X system is being exploited by XARA with their framework osquery.
Roughly 1,400 passengers were temporarily stranded at Warsaw’s Chopin airport over the weekend after hackers were purportedly able to modify an entire airline’s flight plans.
