No Firewalls, No Problem for Google
Google secures its perimeter with explicit trust in what it knows about users and the devices connecting to its corporate services. Continue reading No Firewalls, No Problem for Google
Author Archives: Michael Mimoso
Adobe Patches 13 Code Execution Vulnerabilities in Flash
Adobe patched 13 code execution vulnerabilities in Flash Player today as part of its regular patch update cycle. Continue reading Adobe Patches 13 Code Execution Vulnerabilities in Flash
Updated Firmware Due for Serious TP-Link Router Vulnerabilities
A researcher disclosed vulnerabilities in TP-Link C2 and C20i routers that allow for remote code execution and denial-of-service attacks with authentication. Continue reading Updated Firmware Due for Serious TP-Link Router Vulnerabilities
CryptoShield Infections from RIG EK Picking Up
Researchers have spotted an increase in CryptoShield ransomware infections coming from the RIG Exploit Kit used by EITest delivery campaigns. Continue reading CryptoShield Infections from RIG EK Picking Up
Valve Patches Trivial XSS Bug in Steam
A cross-site scripting vulnerability on the Steam gaming platform has been patched. The flaw could be exploited by simply viewing a crafted profile. Continue reading Valve Patches Trivial XSS Bug in Steam
Macro Malware Comes to macOS
Cybercriminals have developed macro malware for the macOS, the first time this technique has been spotted on the Apple platform. Continue reading Macro Malware Comes to macOS
Attackers Capitalizing on Unpatched WordPress Sites
WordPress sites slow to update to the recent 4.7.2 security release run the risk of falling victim to a handful of defacement attacks spotted by Sucuri. Continue reading Attackers Capitalizing on Unpatched WordPress Sites
Popular iOS Apps Vulnerable to TLS Interception Attacks
More than 70 iOS apps are vulnerable to man-in-the-middle attacks where TLS connections can be intercepted and sensitive data stolen. Continue reading Popular iOS Apps Vulnerable to TLS Interception Attacks
ICS, SCADA Security Woes Linger On
A recent batch of vulnerabilities in Honeywell building automation system software epitomize the linger security issues around SCADA and industrial control systems. Continue reading ICS, SCADA Security Woes Linger On
Cisco Patches Authentication Bypass in Cisco Prime Home
Cisco patched a critical remote authentication bypass vulnerability in its Prime Home remote management tool used by service providers. Continue reading Cisco Patches Authentication Bypass in Cisco Prime Home