Collaborate Disseminate
Attackers could exploit over-the-air updates in three million Android devices to remotely execute commands with root privileges via a man-in-the-middle (MiTM) attack. Continue reading Backdoor Found in Firmware of Some Android Devices
Drupal fixed a handful of issues in version 7 and 8 of the content management system core engine that could have led to cache poisoning, social engineering attacks, and a denial of service condition. Continue reading Drupal Fixes ‘Moderately Critical’ Vulnerabilities in Core Engine
Mike Mimoso and Chris Brook discuss the news of the week, including this week’s House hearing on the Internet of Things, Samy Kamkar’s PoisonTap tool, and Windows 10’s ransomware protections. Continue reading Threatpost News Wrap, November 18, 2016
A vulnerability in iOS 8, 9, 10, and even the most recent beta version, 10.2 beta 3, could allow an attacker to access photos and contacts on a locked iPhone.
Continue reading iOS 10 Passcode Bypass Can Access Photos, Contacts
Mozilla addressed 29 vulnerabilities, three critical, when it released the latest iteration of its flagship browser, Firefox 50 on Tuesday.
Continue reading Mozilla Patches 29 Vulnerabilities, Prevents MIME Confusion Attacks, in Firefox 50
Samy Kamkar’s latest hacking device, PoisonTap, can steal HTTP cookies from millions of websites and install persistent web-based backdoors. Continue reading PoisonTap Steals Cookies, Drops Backdoors on Password-Protected Computers
A vulnerability in cryptsetup, a utility used to set up encrypted filesystems on Linux distributions, could allow an attacker to retrieve a root rescue shell on some systems. Continue reading Cryptsetup Vulnerability Grants Root Shell Access on Some Linux Systems
Academics audited the popular end-to-end encryption app Signal and their findings are encouraging. Continue reading Signal Audit Reveals Protocol Cryptographically Sound
Developers with GitLab fixed a critical vulnerability in the open source repository manager that could have allowed the theft of application files, tokens, or secrets.
Continue reading GitLab Patches Command Execution Vulnerability
Critical vulnerabilities in MySQL and database servers MariaDB and PerconaDB can lead to arbitrary code execution, root privilege escalation, and server compromise. Continue reading Critical MySQL Vulnerabilities Can Lead to Server Compromise