Zero-Day Market Economics Favor Incentives for Defensive Tools
Research on the economics of the zero-day market conducted by HackerOne, MIT, Harvard and Facebook will be presented at RSA Conference.
Vulnerabilities
Vulnerabilities Identified in NY Banking Vendors
To bolster security, banks in New York are planning to enact new regulations for any third party vendors they do business with.
New SMB Flaw Affects All Versions of Windows
There is a serious vulnerability in all supported versions of Windows that can allow an attacker who has control of some portion of a victim’s network traffic to steal users’ credentials for valuable services. The bug is related to the way that Windows and other software handles some HTTP requests, and researchers say it affects […]
Researchers at Kaspersky Lab disclosed some details on the so-called Darwin Nuke vulnerability in Apple OS X and iOS.
The Great Firewall’s offensive counterpart, the Great Cannon, which inject malicious scripts to reroute traffic, is responsible for recent massive DDoS attacks targeting Github and GreatFire.org.
Apple said it will not backport fixes for a hidden backdoor API discovered in OS X.
Apple released Yosemite 10.10.3, which included security updates for 80 vulnerabilities in OS X.
Apple has released iOS 8.3, a major security upgrade for iPhone and iPad users that includes patches for more than three dozen vulnerabilities. The new version of iOS has security fixes for several vulnerabilities in the mobile operating system’s kernel, a handful of code-execution bugs and a long list of WebKit vulnerabilities. Apple also patched […]
DHS warns of two symmetric key authentication vulnerabilities in the NTP protocol that were patched this week.
Less than a week after introducing the new opportunistic encryption feature in Firefox, Mozilla has had to disable it because of a security vulnerability in the browser’s implementation of the HTTP Alternative Services specification. The bug puts a kink in the new feature, which was designed to allow clients to connect securely to a server […]
