Collaborate Disseminate
A local, race condition vulnerability in the af_packet implementation in Linux was patched this week. The bug allows a local attacker to execute code or crash a server. Continue reading Old Linux Kernel Code Execution Bug Patched
A local, race condition vulnerability in the af_packet implementation in Linux was patched this week. The bug allows a local attacker to execute code or crash a server. Continue reading Old Linux Kernel Code Execution Bug Patched
Open source webmail provider Roundcube was patched against a vulnerability that could be trivially exploited to run code on servers or access email accounts. Continue reading Critical Vulnerability Patched in Roundcube Webmail
An Adobe Flash Player vulnerability used by the Sofacy APT gang was also found in seven of the top exploit kits, according to an analysis by Recorded Future. Continue reading Flash Exploit Found in Seven Exploit Kits
Backdoors, likely intentional remote administration features, were closed off in 80 different Sony IP-enabled cameras running the IPELA Engine technology. Continue reading Sony Closes Backdoors in IP-Enabled Cameras
Today’s Android Security Bulletin included a patch for the Dirty Cow vulnerability, a seven-year-old Linux bug that had yet to be patched by Google. Continue reading Dirty Cow Vulnerability Patched in Android Security Bulletin
A research paper describes vulnerabilities enabling distributed guessing attacks which allow an attacker to collect payment card data across a number of sites without triggering alerts. Continue reading Distributed Guessing Attack Reels in Payment Card Data
Banks in Asia and Africa have been targeted with exploits for a zero-day vulnerability in InPage publishing software popular in Arabic-speaking nations. Continue reading InPage Zero Day Used in Attacks Against Banks
NTP 4.2.8p9 includes a patch for a vulnerability that could crash ntpd with a single malformed packet. Continue reading Exploit Code Released for NTP Vulnerability
In the wake of the Pentagon and Army bug bounties, the government continues to engage researchers with the publication of the DoD’s vulnerability disclosure program. Continue reading DoD Publishes Vulnerability Disclosure Policy