Collaborate Disseminate
A firmware update is available for Siemens-branded IP-based CCTV cameras that patches a vulnerability that puts admin credentials at risk. Continue reading Credentials Accessible in Siemens-Branded CCTV Cameras
Researchers have spotted an increase in Nemucod downloader infections moving via Facebook Messenger spam, with some victims being infected with Locky ransomware. Continue reading Nemucod Infections Spreading Locky Over Facebook
Google released its final SHA-1 deprecation deadlines, and crypto services provider Venafi said that 35 percent of the web is still running weak SHA-1 certificates. Continue reading Google Removing SHA-1 Support in Chrome 56
Technologists, including Bruce Schneier, testifying before a House committee today on IoT security said that regulation could be the only answer to solving existing vulnerabilities. Continue reading Regulation May Be Best Answer to IoT Insecurity
A lobbying organization sent a letter to President-Elect Donald Trump, asking him to support the expansion of strong encryption and reform government surveillance activities. Continue reading Lobbyists Press Trump to Support Strong Encryption, Surveillance Reform
VMware patched a vulnerability in Workstation and Fusion that could allow an attacker to run code on a host machine. Continue reading VMware Patches VM Escape Vulnerability
The master decryption keys unlocking files encrypted by the CrySis ransomware have been released. Kaspersky Lab has already updated its Rakhni decryptor to help victims restore their data. Continue reading CrySis Ransomware Master Decryption Keys Released
The government announced its second bug bounty program called Hack the Army, which will concentrate on finding bugs in recruiting websites and databases. Continue reading Army Bug Bounty Building New Relationships with Hackers
An OpenSSL update released on Thursday patched three vulnerabilities included one rated high severity in TLS connections using the ChaCha20-Poly 1305 ciphersuite. Continue reading OpenSSL Patches High-Severity Denial-of-Service Bug
Yahoo’s latest SEC filing includes confirmation that it knew attackers were on its network in 2014 and stole information on 500 million accounts. Continue reading Yahoo Tells SEC It Knew About Data Breach in 2014