Debian developers alerted Linux users late last week of a new build, linux-2.6 that fixes 11 separate vulnerabilities that could open the kernel to a denial of service attack, information leak or privilege escalation.
HD Moore, in collaboration with the University of Michigan, has kicked off Project Sonar, a repository Internet scan data. Moore hopes to crowdsource additional analysis of the data looking for vulnerabilities in embedded devices.
Mike Mimoso and Dennis Fisher look back at the news of the last couple of weeks, including some new NSA PR efforts and the Icefog cyberespionage campaign.
LinkedIn was susceptible to four reflected cross site scripting (XSS) vulnerabilities before issuing a fix for those flaws over the summer.
Telecommunications company Cisco this week is warning customers and those running their software of eight separate vulnerabilities it has patched in its IOS infrastructure product.
Versions 2.0 to 4.0 of the popular open source web framework Ruby on Rails are vulnerable to a web security issue involving cookies that could make it much easier for someone to login to an app as another user.
A researcher reports that the popular Mailbox app for iOS automatically executes javascript embedded in HTML, putting users in line for abuse from spammers and phishers.
Google is planning a major changes in the way that Chrome handles many plug-ins. Beginning early next year, Chrome will no longer support the old Netscape Plug-In API and will block plug-ins that use it. Eventually, that will mean that some plug-ins such as Google Earth, Microsoft Silverlight and others eventually will be blocked by […]
Nearly two years after a security researcher published details of the hard-coded credentials that ship with a slew of industrial control system products made by Schneider Electric, the company has released updated firmware that fix the problems. The vulnerabilities, which were discovered by researcher Ruben Santamarta and published in December 2011, affect dozens of products […]
Developers behind the Apache Struts framework released an update on Friday that fixes two vulnerabilities.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
