Collaborate Disseminate
Facebook quickly resolved a vulnerability in its Business Manager late last month that could have let an attacker take over any Facebook page.
Continue reading Facebook Fixes Vulnerability That Led to Account Takeover, Pays Researcher $16K
The Federal Bureau of Investigation this week urged victims of ransomware to report infections to federal law enforcement in hopes of better understanding the threat.
Continue reading FBI Encouraging Ransomware Victims To Report Infections
The news of the week is discussed, including Schneier’s DDoS article, a patched IE/Edge zero day, a new OS X malware detection method, and Google’s Project Zero prize. Continue reading Threatpost News Wrap, September 16, 2016
Cisco warned customers of 12 vulnerabilities across its product line this week, including a critical vulnerability in the software that powers its conferencing solution WebEx Meetings Server. Continue reading Cisco Patches Critical WebEx Meetings Server Vulnerability
Bruce Schneier talks to Mike Mimoso about information he was given regarding an increase in DDoS and probing attacks targeting companies running core internet infrastructure in an attempt to test their defenses. Continue reading Bruce Schneier on Probing Attacks Testing Core Internet Infrastructure
A rogue “Guide for Pokémon GO” app made it into Google Play’s marketplace and gave attackers root access to any Android device it was installed on. Continue reading Phony Pokémon GO Android App Gave Attackers Root Access
Microsoft patched 47 vulnerabilities with 14 security bulletins, seven critical, with its monthly Patch Tuesday updates today. Continue reading Microsoft Patches 47 Vulnerabilities with September Patch Tuesday
A researcher says the future of OS X malware detection may be rooted in patterns and heatmap visualization. Continue reading Generic OS X Malware Detection Method Explained
Google Chrome will begin marking some HTTP sites as non-secure in 2017.
Continue reading Chrome to Label Some HTTP Sites ‘Not Secure’ in 2017
Developers with WordPress are strongly encouraging users of the content management system to update to the most recent version, 4.6.1, released on Wednesday.
Continue reading WordPress Update Resolves XSS, Path Traversal Vulnerabilities