WordPress Security Update Patches Two Dozen Flaws
WordPress updated to version 4.5.3, a security release for all versions. Continue reading WordPress Security Update Patches Two Dozen Flaws
Author Archives: Michael Mimoso
Patched libarchive Vulnerabilities Have Big Reach
Libarchive was patched against three memory-related vulnerabilities, putting pressure on admins to ensure third-party software that also uses the library is patched. Continue reading Patched libarchive Vulnerabilities Have Big Reach
Nuclear, Angler Exploit Kit Activity Has Disappeared
Researchers who study exploit kits are reporting that two major kits, Angler and Nuclear, may no longer be available. Continue reading Nuclear, Angler Exploit Kit Activity Has Disappeared
Advantech Patches WebAccess Remote Code Execution Flaws
Advantech has published a new version of its WebAccess product to address vulnerabilities that put installations at risk to remote code execution attacks. Continue reading Advantech Patches WebAccess Remote Code Execution Flaws
Google Simplifies Two-Step Verification
Google has simplified its 2-step verification feature with a basic prompt users can take advantage of as a second form of authentication. Continue reading Google Simplifies Two-Step Verification
Meet the 18-Year-Old Who Hacked the Pentagon
The Department of Defense last week released the results of the first Hack the Pentagon bounty program and 18-year-old David Dworken was among those who participated. Continue reading Meet the 18-Year-Old Who Hacked the Pentagon
Apple Patches AirPort Remote Code Execution Flaw
Apple has patched a remote code execution vulnerability in its AirPort base stations, AirPort Express, AirPort Extreme and AirPort Time Capsule. Continue reading Apple Patches AirPort Remote Code Execution Flaw
xDedic Scope May Be Larger Than Originally Thought
New data shared with Kaspersky Lab could enlarge the scope of the xDedic marketplace of hacked servers. Continue reading xDedic Scope May Be Larger Than Originally Thought
Breached Credentials Used to Access Github Repositories
Password reuse strikes GitHub users, some of whom will have to reset their credentials after unauthorized attempts were made to access a large number of GitHub accounts. Continue reading Breached Credentials Used to Access Github Repositories
ScarCruft APT Group Used Latest Flash Zero Day in Two Dozen Attacks
The ScarCruft APT gang has made use of a Flash zero day patched Thursday by Adobe to attack more than two dozen high-profile targets in Russia and Asia primarily. Continue reading ScarCruft APT Group Used Latest Flash Zero Day in Two Dozen Attacks