Collaborate Disseminate
Adobe fixed eight vulnerabilities across three products, Flash Player, RoboHelp for Windows, and ColdFusion, as part of its September Patch Tuesday updates. Continue reading Adobe Fixes Eight Vulnerabilities in Flash, RoboHelp, Flash Player
Researchers warned Monday of two remote code execution vulnerabilities in FreeXL that could let an attacker execute code with local user privileges.
Continue reading FreeXL Library Fixes Two Remote Code Execution Vulnerabilities
The Vice President of the Apache Struts PMC says the attackers likely used an unknown Struts zero day or an earlier announced vulnerability. Continue reading Apache Foundation Refutes Involvement in Equifax Breach
Victims of the massive Equifax breach may have to wait days to find out if they were impacted. Continue reading Many Questions, Few Answers For Equifax Breach Victims
Equifax, one of the three largest credit agencies in the United States, disclosed Thursday afternoon it’s looking into a data breach that may have affected upwards to 143 million Americans. Continue reading Equifax Says Breach Affects 143 Million Americans
Microsoft is opting to stand pat and not fix a content security bypass vulnerability in its Edge browser, something researchers warn could potentially lead to the disclosure of confidential information. Continue reading Microsoft Won’t Fix Security Bypass Vulnerability in Edge
Tor Project developers recently bolstered Orfox, a Tor Browser for Android devices, to help privacy-conscious mobile browsers better customize their security.
Continue reading Tor Project Brings Security Slider Feature to Android App Orfox
Google fixed 81 vulnerabilities, including 13 critical remote code execution bugs, in the September edition of its Android Security Bulletin on Tuesday. Continue reading 13 Critical Remote Code Execution Bugs Fixed in September Android Update
600 gigabytes of information, including SQL database dumps, code, access logs, and customer information, belonging to BroadSoft and its client, TWC, was left online, accessible to anyone. Continue reading Four Million Time Warner Cable Records Left on Misconfigured AWS S3
The Onliner spambot, Google’s forthcoming Not Secure warnings for Chrome, the WireX botnet, Sarahah privacy and more are discussed. Continue reading Threatpost News Wrap, September 1, 2017