Collaborate Disseminate
Oracle has released another monster quarterly security update containing 136 fixes for flaws in a wide range of products including Oracle Database Server, E-Business Suite, Fusion Middleware, Oracle Sun Products, Java and MySQL.The biggest change is… Continue reading Oracle releases 136 security patches for wide range of products
The OS X command line developer tools include an old version of the Git source code management system that exposes Mac users to remote code execution attacks.The Git client allows developers to interact with source code repositories. It is not insta… Continue reading Outdated Git version in OS X puts developers at risk
Viber, a popular instant messaging and Voice-over-IP service provider with more than 700 million users, has implemented end-to-end encryption to protect its customers’ communications against snooping.The move comes after Facebook-owned WhatsApp turn… Continue reading Viber follows WhatsApp in adding end-to-end encryption to its messaging service
Viber, a popular instant messaging and Voice-over-IP service provider with more than 700 million users, has implemented end-to-end encryption to protect its customers’ communications against snooping.The move comes after Facebook-owned WhatsApp turn… Continue reading Viber follows WhatsApp in adding end-to-end encryption to its messaging service
A group of cybercriminals have combined two powerful malware programs to create a new online banking Trojan that has already stolen millions of dollars from customers of 24 U.S. and Canadian banks.The new threat has been dubbed GozNym by researchers… Continue reading Hybrid GozNym malware targets customers of 24 financial institutions
Ransomware authors are using the bitcoin blockchain, which serves as the cryptocurrency’s public transaction ledger, to deliver decryption keys to victims.The technique, which removes the burden of maintaining a reliable website-based infrastructure… Continue reading Ransomware authors use the bitcoin blockchain to deliver encryption keys
Ransomware authors are using the bitcoin blockchain, which serves as the cryptocurrency’s public transaction ledger, to deliver decryption keys to victims.The technique, which removes the burden of maintaining a reliable website-based infrastructure… Continue reading Ransomware authors use the bitcoin blockchain to deliver encryption keys
Alongside its batch of mandatory security patches released Tuesday, Microsoft also issued an optional update aimed at protecting Windows computers against an attack that could hijack wireless mice to execute malicious commands.The attack, dubbed Mou… Continue reading Optional Windows update aims to protect Microsoft wireless mice against hijacking
The FBI reportedly paid professional hackers a one-time fee for a previously unknown vulnerability that allowed the agency to unlock the iPhone of San Bernardino shooter.
The exploit allowed the FBI to build a device capable of brute-forcing the iPhone’s PIN without triggering a security measure that would have wiped all of its data, the Washington Post reported Tuesday, citing unnamed sources familiar with the matter.
The hackers who provided the exploit to the FBI find software vulnerabilities and sometimes sell them to the U.S. government, the newspaper reported.
To read this article in full or to leave a comment, please click here
Continue reading FBI reportedly bought exploit from hackers to access San Bernardino iPhone
Microsoft and the Samba project fixed a vulnerability in their implementation of the SMB/CIFS protocol after the flaw was initially announced three weeks ago under the name Badlock.
The vulnerability, covered by Microsoft in its MS16-047 security bulletin published Tuesday, was also fixed in Samba 4.4.2, 4.3.8 and 4.2.11. It could allow a man-in-the-middle attacker to impersonate an authenticated user and execute arbitrary network calls to the server, possibly with administrative privileges.
Badlock’s existence was announced on March 22 by a company called SerNet, which offers Samba consulting, support and development services. It employs the person who found the flaw: a Samba development team member named Stefan Metzmacher.
To read this article in full or to leave a comment, please click here
Continue reading Microsoft, Samba Badlock flaw not critical, but serious enough