Oracle, Adobe Announce First Critical Patches of 2014
As expected, Oracle and Adobe will release critical patches alongside Microsoft on Tuesday to kick off the year’s inaugural Patch Tuesday batch of security updates.
Vulnerabilities
Siemens Fixes Authentication Bugs in Scalance X-200 Switches
Researchers have discovered two serious vulnerabilities in industrial Ethernet switches manufactured by Siemens that could enable attackers to perform unauthorized actions on the switches without authentication. One of the bugs allows attackers to hijack Web sessions and the other enables them to perform admin tasks on the switches. The vulnerabilities were discovered by researchers at […]
Linux Kernel, Font Bugs Fixed in Ubuntu
A huge number of security vulnerabilities have been fixed in Ubuntu, including a remotely exploitable font flaw that an attacker could use to run arbitrary code on vulnerable machines.
Hackers exploited a previously disclosed vulnerability in the popular photo sharing application Snapchat and leaked 4.6 million of the service’s usernames and partial phone numbers online yesterday.
The Federal Election Commission (FEC) is highly vulnerable to intrusions and data breaches after an audit discovered “significant deficiencies” in the FEC’s IT security program.
Rather than trying to rank the NSA revelations on any sort of scale, we’ve put together an admittedly simplified list of some of the more interesting NSA-related stories to emerge in 2013.
A researcher reported a cross-site request forgery vulnerability to eBay in August, and despite repeated communication from the online auction that the code has been repaired, the site remains vulnerable to exploit.
VMware patched vulnerabilities in its ESX and ESXi products that allow unauthorized local read/write access to files.
The domain registrar and Web-hosting company Namecheap has fixed a cross site request forgery vulnerability in its DNS setup page.
Scientists have proved that they can extract a 4096-bit RSA key from a laptop using an acoustic side-channel attack that enables them to record the noise coming from the laptop during decryption, using a smartphone placed nearby. The attack can be used to reveal a large RSA key in less than an hour.
