Web Security

Vulnerabilities in Cisco’s Unified Communications Manager

Cisco published an advisory report yesterday detailing multiple vulnerabilities in there Unified Communications Manager.

There are three denial of service vulnerabilities that affect session initiation protocol services, two SQL injection vulnerabilities, and a directory transversal vulnerability.

These bugs affect versions 6-8 of Cisco’s Unified Communications Manager.

The DoS bugs are triggered by a malformed SIP message that could cause a critical process to fail, resulting in the failure of voice services.

Apple Admits to Bugs, Denies Tracking iPhone Users

Apple finally sounded off on its phone tracking imbroglio on Wednesday
telling iPhone customers that “it’s the location, stupid.” The company
claims its tracking feature is designed to collect data on cell towers
and wifi hotspots, not users.

Glass Dragon: China’s Cyber Offense Obscures Woeful Defense

by Paul Roberts
25

The official line in Washington D.C. is that there’s a new Cold War brewing, with an ascendant China in the place of the old Soviet Union, and cyberspace as the new theater of war. But work done by an independent security researcher suggests that the Chinese government is woefully unprepared to fend off cyber attacks on its own infrastructure.

Users File Suit Against Apple Over iPhone Tracking

by Dennis Fisher
2

A pair of Apple customers has filed a lawsuit against the company, alleging that Apple is invading their privacy by collecting location data about iPhone and iPad users without their knowledge. The suit follows the revelation last week by security researchers that Apple is collecting and storing some location data from users.

PlayStation Network Down Following ‘External Intrusion’

by Brian Donohue

Sony’s online gaming platform, The PlayStation Network (PSN), continued a five day outage on Monday after what the company described as an “attack” on its network knocked PSN offline on April 20. And hope is fading for a fast resolution, with Sony saying it is revamping the network to make it more secure.

Cybersecurity for your growing business
Cybersecurity for your growing business

Topics

Show all

Authors

Threatpost

InfoSec Insider

Infosec Insider Post

Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.

Sponsored

Sponsored Content

Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.