Collaborate Disseminate
Mozilla filed a motion asking the courts to compel the government to turn over details on a zero-day vulnerability in the Tor Browser used to hack visitors to a child pornography website. Continue reading Motion Filed Asking FBI To Disclose Tor Browser Zero Day
Researchers at Onapsis and DHS CERT today published reports describing a critical SAP Invoker Servlet vulnerability that has been used to attack 36 global enterprises spanning 15 critical industries. Continue reading Attackers Targeting Critical SAP Flaw Since 2013
Facebook today made its capture the flag platform freely available on GitHub, which includes a ready-made backend and a set of pre-defined challenges. Continue reading Facebook Makes Its CTF Platform Freely Available
Microsoft’s Patch Tuesday security bulletins include a patch for a JScript and VBScript scripting engine vulnerability being publicly exploited. Continue reading Microsoft Patches JScript, VBScript Flaw Under Attack
The FTC and FCC have given mobile device makers and carriers 45 days to report on their respective security update practices. Continue reading FCC, FTC Investigate Mobile Security Update Practices
WordPress has issued a security release, patching a SOME vulnerability in Plupload, and a reflected cross-site scripting bug in MediaElement.js. Continue reading WordPress Patches SOME, XSS Flaws in Version 4.5.2
Domain registrar GoDaddy fixed a vulnerability affecting systems used by its customer support agents that could have been abused to take over, modify or delete accounts. Continue reading GoDaddy Addresses Blind XSS Vulnerability Affecting Online Support
Twitter has asked its business partner Dataminr to no longer provide it services to the U.S. intelligence community. Continue reading Twitter Turns Off Fire Hose For Intelligence Community
An FBI warning urges organizations to be vigilant about ransomware, and reaffirmed its position that companies should not pay ransoms to recover their files. Continue reading FBI Reaffirms Stance Not to Pay Ransomware Attackers
Google’s monthly patch release has a new name, and a slew of old bugs in Mediaserver. Continue reading Google Patches More Trouble in Mediaserver