Default Credentials Lead to Massive DDoS-For-Hire Botnet
Tens of thousands of home and office-based routers have been hijacked over the last several months to stage a distributed denial of service attack campaign.
Vulnerabilities
Firefox 38 Fixes 13 Flaws, Ships With DRM Support
Mozilla has fixed 13 security flaws in Firefox 38, including five critical vulnerabilities. The new version of the browser also includes a feature that enables the use of DRM-enabled video content in Firefox, a decision that comes with some controversy. DRM (digital rights management), the generic name for technologies that are used to restrict the […]
Microsoft Patches Remote Code Execution Bugs in IE, Font Drivers, Windows Journal
The May 2015 Microsoft Patch Tuesday security updates include 13 bulletins, three of them rated critical for bugs in IE, font drivers and Windows Journal.
Adobe released security updates for Flash, Reader and Acrobat, patching 52 vulnerabilities.
A researcher warns users of the extensible Z-Way controller project that a weakness built into the software could easily expose it to attacks.
The MacKeeper OS X and iOS performance and security utility has been patched against a remote code execution zero day vulnerability.
Hackers are exploiting a remote code execution vulnerability in Elasticsearch, according to one researcher who published logs from a honeypot he built showing 8,000 attempts to exploit the bug.
Zscaler has discovered a number of WordPress sites that have been backdoored and sending credentials to a hacker-controlled website.
There is a stack buffer overflow in a Rockwell Automation application that’s used to enable communications in industrial control applications used in manufacturing, energy, water,and other environments. The vulnerability is in the RSLinx Classic product and it can be used to crash the application or run arbitrary code. However, the bug is not exploitable remotely […]
Adobe released pre-notification of security updates coming next week for its Reader and Acrobat products. The updates will address critical vulnerabilities in both products, Adobe said.
