Ruby on Rails Exploit Builds IRC Botnet of Compromised Servers
A widespread Ruby on Rails exploit has surfaced that builds a botnets of compromised servers via IRC. Developers are urged to apply a five-month-old patch for the bug.
Vulnerabilities
PayPal Site Vulnerable to XSS Attack
A 17 year old German schoolboy posted information over the weekend regarding an apparent cross site scripting (XSS) vulnerability in the popular money transfer site PayPal. The problem lies in the site’s search function and at least in the German version of the website can be triggered by using a string of Javascript alert code.
Researchers Discover Dozens of Gaming Client and Server Vulnerabilities
Two video game researchers have discovered a slew of zero day vulnerabilities in the engines that run popular first person shooter games like “Quake 4,” “Monday Night Combat,” “Crysis 2” and “Homefront,” among others that could put their servers and the gamers who use them in danger.
Google has released Chrome 27, a new version of its browser that includes a long list of security fixes, many of which are for high-risk vulnerabilities. The company handed out more than $14,000 in rewards to researchers who reported bugs fixed in the latest iteration of Chrome.
Multiple vulnerabilities have been discovered in both File Lite and File Pro, two file management applications created by Perception Systems for iOS, currently available on Apple’s App Store.
Vulnerability disclosure discussions were the favorite parlor game of the security community for a long time, but slowly and surely, debates over exploit sales are nudging disclosure off its pedestal.
Adobe released its May 2013 security updates, which includes patches for vulnerabilities in ColdFusion being exploited in the wild.
A Cambodian website compromised by the same group involved in the Department of Labor watering hole attack is serving malware and targeting employees of USAID.
It’s no secret that Java has moved to the top of the target list for many attackers. It has all the ingredients they love: ubiquity, cross-platform support and, best of all, lots of vulnerabilities. Malware targeting Java flaws has become a major problem, and new statistics show that this epidemic is following much the same […]
Defenders are at an asymmetric disadvantage when it comes to defending their networks. Attackers spend every minute of their day focused exclusively on penetrating your network to accomplish their mission…and opportunities abound.
