Apple Updates OSX Blacklist Following Flash Vulnerability
Apple acknowledged on Thursday that it has updated its OSX plugin blacklist to reflect a critical vulnerability in Adobe Flash made public earlier this week.
Vulnerabilities
Lack of Certificate Pinning Exposes Encrypted iOS Gmail App Communication
Google has failed to implement certificate pinning in its official iOS Gmail application, which could enable Man-in-the-Middle attacks exposing encrypted user communications.
Yahoo Patches Bugs in Mail, Messenger, Flickr
Yahoo recently fixed a trio of remotely exploitable vulnerabilities in its services that could have let attackers execute a handful of nefarious tricks.
Microsoft fixes 29 security vulnerabilities in Windows, Internet Explorer, and Server Software in its July 2014 Patch Tuesday release.
Adobe patched Flash Player today, adding validation checks to the software so that it rejects malicious content from vulnerable JSONP callback APIs.
A vulnerability in Netgear-branded ethernet switches could give an attacker full access to the hardware.
The Cisco Unified Communications Domain Manager contains a default private SSH key that could allow an attacker to run arbitrary code on vulnerable installations. The bug is about as serious as they come, giving remote, unauthenticated attackers access to affected machines with the rights of a root user.
Wordpress users that have the MailPoet newsletter plugin installed are being cautioned to upgrade immediately.
Apple updates Mavericks, iOS, Safari, and AppleTV with a long list of patches for critical security vulnerabilities.
Google has fixed a security vulnerability in it’s cloud storage service, Drive, which could have leaked sensitive data to third parties.
