Collaborate Disseminate
Embedded serial device servers built by Moxa and used in a number of critical industries remain vulnerable to three serious security issues that have not been patched by the vendor. Continue reading Moxa MiiNePort Devices Leak Data, Open to Unauthorized Access
Researchers at Kaspersky Lab have identified six APT groups using exploits for a Microsoft Office flaw that was patched in September 2015. Continue reading APT Groups Finding Success with Patched Microsoft Flaw
Facebook paid researcher Arne Swinnen a $5,000 bounty for a pair of authentication vulnerabilities in Instagram that enabled brute-force attacks against usernames and passwords. Continue reading Instagram Patches Brute-Force Authentication Flaws
Google Allo has an end-to-end encryption capability powered by Signal, but it’s not turned on by default because it would interfere with an artificial intelligence powering Google Assistant. Continue reading Google Allo a Clash of Privacy and Functionality
The criminals behind the TeslaCrypt ransomware have closed up shop and publicly released the master decryption key that unlocks files encrypted by the malware. Continue reading Master Decryption Key Released for TeslaCrypt Ransomware
Two University of Texas academics have made what some experts believe is a breakthrough in random number generation that could have longstanding implications for cryptography and computer security. Continue reading Academics Make Theoretical Breakthrough in Random Number Generation
Google has announced that hacker-favorite Adobe Flash Player will no longer, as of Q4, be the default in Chrome. Instead, Chrome will default to HTML5. Continue reading Chrome Defaults to HTML5 over Adobe Flash Starting in Q4
Yahoo is forcing a password reset on Tumblr accounts after a cache of email addresses and salted and hashed passwords from 2013 were discovered in the wild. Continue reading Tumblr Accounts Must Reset Passwords
The latest Petya ransomware attacks come with a twist; if Petya is not granted privileges to encrypt the Master File Table, it instead installs Mischa ransomware. Continue reading Latest Petya Ransomware Strain Comes with a Failsafe: Mischa
Adobe pushed out an emergency Flash Player update, patching a zero-day vulnerability. Adobe said a public exploit exists for CVE-2016-4117. Continue reading Emergency Flash Update Patches Public Zero Day