Adobe released an out-of-band patch for its Flash Player that corrects a zero-day vulnerability being exploited in the wild in watering hole attacks against defense and public policy websites.
Microsoft made a Fix-It tool available as a temporary mitigation for a zero-day vulnerability in Internet Explorer 10. The zero day is being exploited by two hacker groups.
A new Metasploit module exploits a remote code execution vulnerability in Android devices prior to version 4.2.1, which encompasses 70 percent of Android devices.
Windows Error Reporting, or Dr. Watson, can be used to detect advanced exploits targeting organizations by fingerprinting exploit behaviors and correlating those with system or application crashes.
Yang Yu’s submission to the Microsoft bug bounty program completely elude ASLR and DEP mitigations built into Windows, earning him $100,000.
Less than a week after the Moon worm, new and unrelated vulnerabilities have been reported in Linksys home and small office routers. Hackers can use a simple exploit to gain remote access to the boxes.
Researcher Yang Yu was awarded $100,000 from Microsoft for writing three mitigation bypass variants as part of the company’s bounty program. Yu is the second $100,000 winner since the bounty program was launched last June.
A list of almost 8,000 credentials for FTP sites is circulating on the black market; the list includes high profile targets that are at risk for compromise.
A worm is spreading on a number of home and small business routers manufactured by Linksys. Researchers at the SANS Institute have not been able to determine whether there is a malicious payload or learn much about command and control.
Attackers used one server in a massive DDoS attack against an organization in Europe, generating 400 Gbps of bad traffic at its peak via NTP amplification.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
