Collaborate Disseminate
Trustwave discloses an unpatched vulnerability in Brother printers with the Debut embedded webserver after numerous attempts to contact the vendor failed. Continue reading Brother Printers Susceptible to Remote Denial of Service Attacks
Cisco has updated its IOS XE software to address a denial of service vulnerability in its implementation of BGP over an Ethernet VPN. Continue reading Cisco Patches DoS Flaw in BGP over Ethernet VPN Implementation
An adware-laden phony WhatsApp download has been removed from Google Play and the developer’s account suspended, but not before it was downloaded one million times. Continue reading 1M Downloads Later, Google Pulls Phony WhatsApp From Google Play
Threatpost editors Mike Mimoso and Tom Spring discuss the week’s top information security news stories. Continue reading Threatpost News Wrap Podcast for Nov. 3
Siemens has fixed a remotely executable vulnerability in some versions of its SIMATIC PCS 7 distributed control system, and said that it is working on a fix for remaining affected versions. Continue reading Siemens Update Patches SIMATIC PCS 7 Bug in Some Versions
Researchers from MWR Labs used 11 vulnerabilities across six different mobile applications to execute code on a Samsung Galaxy S8 at Mobile Pwn2Own. Continue reading Chain of 11 Bugs Takes Down Galaxy S8 at Mobile Pwn2Own
The ONI ransomware attacks targeting organizations in Japan are also dropping wiper malware which is being used to delete logs and cover the attackers’ tracks. Continue reading Devilish ONI Attacks in Japan Use Wiper to Cover Tracks
A cybercrime outfit stealing from as many as 10 banks in Russia, Armenia and Malaysia has borrowed heavily from one of the kingpins in this realm, Carbanak. Continue reading Silence Gang Borrows From Carbanak To Steal From Banks
Apple has patched the KRACK vulnerability in iOS and elsewhere in its product line, closing a key re-installation vulnerability in the WPA2 protocol implemented used by its software. Continue reading Apple Patches KRACK Vulnerability in iOS 11.1
Oracle released an emergency patch for a remote code execution vulnerability in Oracle Identity Manager rated a 10 out of 10 in severity. Continue reading Emergency Oracle Patch Closes Bug Rated 10 in Severity