FDA Demands St. Jude Take Action on Medical Device Security

The FDA sent Abbott Laboratories a warning letter citing that it had inadequately addressed the security of the maligned Merlin@home Transmitter. Continue reading FDA Demands St. Jude Take Action on Medical Device Security

Office Zero Day Delivering FINSPY Spyware to Victims in Russia

Researchers have learned that the recently patched Office zero day was used to target victims in Russia with FINSPY spyware. Continue reading Office Zero Day Delivering FINSPY Spyware to Victims in Russia

SAP Updates Two-Year-Old Patch for TREX Vulnerability

SAP has issued an updated patch for a code-injection vulnerability affecting the TREX search engine integrated into more than a dozen SAP products. Continue reading SAP Updates Two-Year-Old Patch for TREX Vulnerability

ShadowBrokers Dump More Equation Group Hacks, Auction File Password

The ShadowBrokers’ latest dump of Equation Group hacks focuses on UNIX systems and GSM networks, and was accompanied by an open letter to President Trump. Continue reading ShadowBrokers Dump More Equation Group Hacks, Auction File Password

ShadowBrokers Dump More Equation Group Hacks, Auction File Password

The ShadowBrokers’ latest dump of Equation Group hacks focuses on UNIX systems and GSM networks, and was accompanied by an open letter to President Trump. Continue reading ShadowBrokers Dump More Equation Group Hacks, Auction File Password

Riverbed Patches Vulnerabilities in Application Monitoring Portal

Riverbed Technology, whose products are used by most of the Global 500, patched vulnerabilities in its SteelCentral Portal used for critical application performance monitoring. Continue reading Riverbed Patches Vulnerabilities in Application Monitoring Portal