Norwich University Receives $9.9M for Cybersecurity Research
Vermont’s Norwich University secured another round of funding – $9.9 million in federal contracts – for cybersecurity research this week.
Chris Brook
About
"Distrust and caution are the parents of security" - Benjamin Franklin
Cisco Patches DoS, Buffer Overflow Vulnerabilities in UCM
Cisco has fixed several vulnerabilities that if left unpatched could lead to a denial of service attack and allow attackers to modify data or execute arbitrary commands, among other problems.
FDA Issues Recommendations on the Security of Wireless Medical Devices
The Food and Drug Administration (FDA) last week issued a series of guidelines regarding the regulation of radio frequency (RF) technology in medical devices, moves that if put into practice, could eventually help shore up the increasingly vulnerable medical device security world.
Spammy websites distributing adware as Java or other kinds of software updates are nothing new but researchers have recently noticed two sites pushing that malware to users through sites that leverage Google’s App Engine.
A member of Facebook’s security team acknowledged over the weekend that the group could’ve taken further steps to verify a vulnerability initially brought to their attention by an independent security researcher last week but that the company largely adhered to its bug disclosure policy.
According to research unveiled this week some types of web-enabled light bulbs are vulnerable to a flaw wherein an attacker could literally leave users of the bulbs in the dark.
Researchers have discovered a number of a malicious Android apps are using Google’s Cloud Messaging service and leveraging it as a command and control server to carry out attacks.
The National Highway Traffic Safety Administration restored its servers yesterday, 10 days after an attack that knocked the agency’s website offline.
The Counter.php strain of malware has been spotted in the past redirecting users to a handful of malicious sites and now appears to be leveraging that ability to send victims to websites serving up the Styx exploit kit.
Dennis Fisher and Mike Mimoso discuss the news from Black Hat and DEF CON, particularly the fact that the Web seems to be broken and that a lot of the attacks revealed in Las Vegas don’t have easy solutions.
