Exploit code has been published for a Google Chrome bug that allows malicious websites granted permission to use a computer’s microphone for speech recognition to continue listening after a user leaves the website.
Remote code execution bugs are the gold nuggets of security research. They’re the ones that researchers stay up all night looking for and they’re the kind of vulnerabilities that often are worth big money, whether it’s from a vulnerability broker, a government agency or a bug bounty program. For Reginaldo Silva, when he came across […]
There is a bug in the anti-cross site scripting filter in Chrome and Safari that enables an attacker to bypass the filter in some cases and use an XSS flaw on a given site to compromise visitors’s machines. The vulnerability is fairly simple to exploit and a researcher has posted proof-of-concept code. The vulnerability lies […]
Starbucks has patched a vulnerability in its iOS app that was found spilling user data last week but the researcher that found the vulnerability is still encouraging the company to look at an outstanding geolocation issue present in the app.
BrightBox home and small business routers are vulnerable to a number of security problems that leaving the networking gear exposed locally and remotely to attack.
A vulnerability in Starbucks’ mobile app could be putting coffee drinkers’ information – including their usernames, email addresses and passwords – at risk.
Cisco has released patches for three vulnerabilities in its Secure Access Control System, including two flaws that could enable a remote attacker to take complete control of an affected system.
Among the 144 patches released as part of Oracle’s quarterly Critical Patch Update were 36 patches for Java, a prominent reminder the Java security house is still not in order.
Google has fixed five vulnerabilities in its Chrome browser and also has activated a feature that will block malicious file downloads automatically. The change is a major security upgrade for Chrome and will help prevent users from unwittingly downloading harmful files, an attack vector that attackers count on for the success of drive-by downloads and other attacks.
There is a serious vulnerability in several Cisco wireless routers that could give an attacker root level access. The bug is the result of a backdoor in the routers that was set up as a test interface, and Cisco does not yet have patches available to fix it.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
