iOS WebView Problem Allows Attackers to Initiate Phone Calls
An issue in iOS WebView that is trivial to exploit can give an attacker the ability to trigger phone calls from a targeted device, researcher Collin Mulliner said.
Collin Mulliner
Tor Begins Blacklisting Exit Nodes Vulnerable to Heartbleed
The Tor Project is in the process of rejecting exit nodes vulnerable to the Heartbleed OpenSSL vulnerability after researcher Collin Mulliner discovered more than 1,000 leaking plaintext traffic.
GUI Vulnerabilities Expose Information Disclosure, Privilege Escalation
Developers are configuring GUIs as mechanisms for access control and exposing enterprises to privilege escalation and information disclosure vulnerabilities.
