Patch Available for DoS Vulnerability in BIND Nameservers
ISC has patched a denial of service vulnerability in certain versions of BIND 9.
Vulnerabilities
Remembering Barnaby Jack
It’s said that each man’s death diminishes us all in some way. But some passings take a bigger piece than others. The death of Barnaby Jack is one of those, having left a major hole in the security community and let a lot of air out of the room.
SIM Card Vulnerability Could Affect Hundreds of Millions of Cell Phones
As many as 750 million mobile phones could be vulnerable to an encryption flaw on some types of SIM cards, a German cryptographer and researcher warned over the weekend.
A Google Glass feature that gives the device the ability to automatically read text also leaves it vulnerable to malicious wireless networks, according to Lookout mobile security research.
Researchers have discovered a new vulnerability in the Java Reflection API that can be exploited by a decade-old attack.
Oracle released its July 2013 Critical Patch Update, patching 89 vulnerabilities across a number of product lines including its flagship Database Server and Fusion Middleware.
A security researcher disclosed details on several remote access vulnerabilities in Asus home routers.
IntegraXor, a manufacturer of supervisory control and data acquisition (SCADA) equipment, announced last week that it would implement a bug bounty program offering points redeemable for company services to researchers that disclose security vulnerabilities in their IGX SCADA system.
A new app called ReKey fixes the Android master key vulnerability, released by Duo Security.
A few weeks after admitting that it had put an administrative backdoor in its StoreOnce backup servers, HP has said it has a similar mechanism in its StoreVirtual storage systems that allows a remote user to access the operating system. The company said the function is meant for remote support use, but acknowledged that it could also be an attack vector.
