Collaborate Disseminate
Yelp today announced a public bug bounty, which will pay up to $15,000 for critical vulnerabilities found on its mobile and desktop sites, public API and other areas of its infrastructure. Continue reading Yelp Launches Public Bug Bounty
Apple has patched the Trident vulnerabilities in OS X and Safari. The flaws were originally disclosed in iOS and used to spy on a UAE human rights activist. Continue reading Apple Patches Trident Vulnerabilities in OS X, Safari
Attackers are targeting insecure Redis instances, exposed to the internet, to access Linux servers and delete web files and folders in exchange for ransom. Continue reading Insecure Redis Instances at Core of Attacks Against Linux Servers
Adobe pushed hotfixes to ColdFusion 11 and 10 installations addressing a XXE vulnerability that can be exploited processing OOXML documents. Continue reading Patched ColdFusion Flaw Exposes Applications to Attack
Linux admins are reporting attacks against webservers resulting in the deletion of web folders, reportedly by attackers using a ransomware variant called Fairware. Continue reading Fairware Attacks Targeting Linux Servers
Researchers at Kaspersky Lab today confirmed that the cybercriminals behind the Lurk Trojan were also responsible for the development and distribution of the Angler Exploit Kit Continue reading Inside the Demise of the Angler Exploit Kit
A complaint filed with the FTC alleges unfair and deceptive practices on the part of WhatsApp, which has decided to share phone numbers and data with Facebook. Continue reading Privacy Groups File FTC Complaint over WhatsApp Data Sharing with Facebook
VMware this week patched its Identity Manager and vRealize Automation products against privilege escalation and remote code execution vulnerabilities. Continue reading VMware Patches Flaws in Identity and Cloud Products
Tor updated its software to 0.2.8.7 and fixed a number of issues, including a bug in the ReachableAddresses option that possibly degrades anonymity. Continue reading Tor Update Fixes ReachableAddresses Problem
Cisco today began the process of patching a zero-day vulnerability in its Adaptive Security Appliance (ASA) software exposed in the ShadowBrokers data dump. Continue reading Cisco Begins Patching Equation Group ASA Zero Day