Collaborate Disseminate
WordPress patched a zero day vulnerability in the WP Mobile Detector plugin that had been publicly attacked for close to a week. Continue reading WordPress Patches Zero Day in WP Mobile Detector Plugin
Chrome 51.0.2704.79 for Windows, Mac, and Linux was released Wednesday and patched 15 vulnerabilities, including two high-severity flaws eligible for bounties Continue reading Google Patches Two High-Severity Flaws in Chrome
An advisory from PC maker Lenovo recommends that users uninstall Lenovo Accelerator Application, which includes components rife with security vulnerabilities. Continue reading Lenovo Tells Users to Uninstall Vulnerable Updater
Russian authorities made 50 arrests related to a five-year campaign to steal $45M from Russia’s largest bank, Sberbank. Continue reading Arrests Made In $45M Russian Bank Hack
Yahoo today disclosed the contents of three National Security Letters it received in 2013 and 2015, becoming the first company under reforms afforded by the USA FREEDOM Act to do so. Continue reading Yahoo Discloses Contents of Three National Security Letters
At Hack in the Box last week, a researcher demonstrated a new tool that swaps out legitimate iOS apps with malicious versions, beating mitigations in place on Apple devices. Continue reading SandJacking Attack Puts iOS Devices At Risk to Rogue Apps
High-severity vulnerabilities were found in pre-installed software updaters present in consumer and business laptops from vendors such as Dell, HP, Lenovo, Asus and Acer. Continue reading Bloatware Insecurity Continues to Haunt Consumer, Business Laptops
A federal judge granted a defense motion in the case of a Vancouver teacher charged with possession of child pornography, excluding evidence gathered by a FBI network investigative technique that exploits an unpatched hole in the Tor browser. Continue reading Judge Tosses Evidence Gathered by FBI’s Tor Exploit
Mariusz Mlynski is having a May to remember, earning $30,000 in bounties from Google for vulnerabilities he discovered and disclosed, on top of another $15,500 earlier this month from the same program. Continue reading Researcher Pockets $30,000 in Chrome Bounties
The coalition behind CanaryWatch.org, a database of warrant canaries, has decided to no longer accept new submissions, nor monitor existing canaries for changes. Continue reading Canary Watch Project Runs Its Course