Collaborate Disseminate
Mike Mimoso and Chris Brook discuss the news of the week, including the latest Linux bug, Sony closing backdoors in cameras, and Google’s new open source fuzzer. Continue reading Threatpost News Wrap, December 8, 2016
Matthew D. Green, PhD, a well-known cryptographer and researcher at Johns Hopkins University, will carry out an audit of OpenVPN. Continue reading OpenVPN to Undergo Cryptographic Audit
The BSD libc library was updated recently to address a buffer overflow vulnerability that could have allowed an attacker to execute arbitrary code.
Continue reading Buffer Overflow in BSD libc Library Patched
The video sharing website DailyMotion admitted early Tuesday that it recently suffered an “external security problem” which resulted in the compromise of its users data. Continue reading DailyMotion Hack Leaks Emails, Passwords of 87M Users
A new Google program OSS-Fuzz is aimed at continuously fuzzing open source software and has already detected over 150 bugs. Continue reading Google Debuts Continuous Fuzzer for Open Source Software
Mozilla released a new version of Firefox on Wednesday to address a zero day vulnerability that was actively being exploited to de-anonymize Tor Browser users.
Continue reading Mozilla Patches Firefox Zero Day Used to Unmask Tor Browser Users
Microsoft appears to have silently fixed a two-year-old bug in in Windows Kernel Object Manager that could have allowed for the bypass of privileges in Google’s Chrome browser. Continue reading Microsoft Silently Fixes Kernel Bug That Led to Chrome Sandbox Bypass
Researchers say they spotted the remote access Trojan NetWire stealing payment card data from one organization. Continue reading NetWire RAT Back, Stealing Payment Card Data
PayPal fixed an issue that could have allowed an attacker to hijack OAuth tokens associated with any PayPal OAuth application. The vulnerability was publicly disclosed on Monday by Antonio Sanso, a senior software engineer at Adobe, after he came across the issue while testing his own OAuth client. For its part, PayPal remedied the vulnerability about […] Continue reading PayPal Fixes OAuth Token Leaking Vulnerability
Vulnerabilities in UberCENTRAL, a portal used by businesses to facilitate rides, could have leaked the names, phone numbers, email addresses, and unique IDs. Continue reading Uber Portal Leaked Names, Phone Numbers, Email Addresses, Unique Identifiers