Collaborate Disseminate
MedSec CEO Justine Bone talks to Mike Mimoso about the St. Jude Medical vulnerabilities, the considerations her company and Muddy Waters made in short selling St. Jude stock, and the current state of medical device security. Continue reading Justine Bone on St. Jude Vulnerabilities and Medical Device Security
Oracle patched 270 vulnerabilities, many remotely exploitable, across 45 different products as part of its quarterly Critical Patch Update (CPU) on Tuesday. Continue reading Oracle Patches 270 Vulnerabilities in Year’s First Critical Patch Update
Researchers say iTunes and Apple’s App Store suffer from a persistent input validation and mail encoding web vulnerability. If exploited, it could allow an attacker to inject their own malicious script. Continue reading Vulnerabilities Leave iTunes, App Store Open to Script Injection
Operations Manager at Paterva Andrew Macpherson outlines the details of the “Digital Intelligence Gathering using Maltego” course being offered at SAS 2017. Continue reading Andrew Macpherson on Intelligence Gathering with Maltego
Operations Manager at Paterva Andrew Macpherson outlines the details of the “Digital Intelligence Gathering using Maltego” course being offered at SAS 2017. Continue reading Andrew Macpherson on Intelligence Gathering with Maltego
The news of the week is discussed, including the ShadowBrokers’ farewell, GoDaddy’s buggy domain validation issue, MongoDB ransoms, and the latest with St. Jude Medical.
Mike Mimoso talks to Marie Moe, a research scientist at SINTEF of Norway, about her personal and emotional connection to medical device security. Continue reading Marie Moe on Medical Device Security
A new WordPress update, pushed this week, resolves eight security issues, including a handful of XSS and CSRF bugs. Continue reading WordPress 4.7.1 Fixes CSRF, XSS, PHPMailer Vulnerabilities
Cloudflare on Tuesday was finally able to post a National Security Letter it received from the FBI back in 2013.
Continue reading Cloudflare Shares National Security Letter It Received in 2013
Researchers recently identified a phishing campaign set up to lure unsuspecting Netflix users into giving up their credentials and credit card data.
Continue reading Netflix Phishing Campaign Targeted User Information, Credit Card Data