Smaller, Popular Open Source Software Packages Exposed in Sourceforge Review
Metasploit released exploit modules for security issues in seven smaller, yet popular, open source software packages, including e-Learning software Moodle.
Vulnerabilities
Mozilla Fixes 10 Vulnerabilities with Firefox 25
Mozilla released Firefox 25 yesterday, fixing 10 vulnerabilities, five of them critical.
Researcher Finds Method to Insert Malicious Firmware Into Currency Validator
If espionage is the world’s second-oldest profession, counterfeiting may be in the running to be third on that list. People have been trying to forge currency for just about as long as currency has been circulating, and anti-counterfeiting methods have tried to keep pace with the state of the art. The anti-counterfeiting technology in use […]
A mass injection campaign surfaced over the last two weeks that’s already compromised at least 40,000 web pages worldwide and is tricking victims into downloading rogue, unwanted software to their computer.
A researcher has discovered serious vulnerabilities in the main Facebook and Facebook Messenger apps for Android that enable any other app on a device to access the user’s Facebook access token and take over her account. The same researcher also discovered a separate, similar flaw in the Facebook Pages Manager for Android, an app that […]
It’s been known for some time now–several months, in fact–that there is a critical, remotely exploitable vulnerability in some of Netgear’s ReadyNAS storage boxes, and a patch has been available since July. However, many of the boxes exposed to the Web are still vulnerable, and a recent scan by HD Moore of Rapid7 found that […]
There is a vulnerability in some Netgear wireless routers that allows a remote attacker to completely compromise a device and gain root privileges. The bug is trivially exploitable and the researcher who discovered it has posted a proof-of-concept exploit. The vulnerability is a command-injection flaw that, when combined with a separate authentication-bypass bug that the […]
Cisco patched vulnerabilities in six products, fixing issues that could have led to denial of service (DoS) attack or allowed an attacker to execute code.
DARPA announced the Cyber Grand Challenge, a $2M competition for the development of an automated network defense system that not only scans for and identifies vulnerabilities, but patches them on the fly.
Apple fixed more than 100 security vulnerabilities across eight different products yesterday including updates for the iTunes, Safari, iOS 7, Keynote 6.0, two versions of Apple’s Remote Desktop (3.7, 3.5.4) and OS X Server 3.0.
