Critical Flaws Found in VxWorks RTOS That Powers Over 2 Billion Devices

Security researchers have discovered almost a dozen zero-day vulnerabilities in VxWorks, one of the most widely used real-time operating systems (RTOS) for embedded devices that powers over 2 billion devices across aerospace, defense, industrial, medic… Continue reading Critical Flaws Found in VxWorks RTOS That Powers Over 2 Billion Devices

Judge Rules No Jail Time for WannaCry ‘Killer’ Marcus Hutchins, a.k.a. MalwareTech

Marcus Hutchins, better known as MalwareTech, has been sentenced to “time served” and one year of supervised release for developing and selling the Kronos banking malware.

Yes, Hutchins will not go to prison, United States District Judge J.P. Stadtmue… Continue reading Judge Rules No Jail Time for WannaCry ‘Killer’ Marcus Hutchins, a.k.a. MalwareTech

Just Opening A Document in LibreOffice Can Hack Your Computer (Unpatched)

Are you using LibreOffice?

You should be extra careful about what document files you open using the LibreOffice software over the next few days.

That’s because LibreOffice contains a severe unpatched code execution vulnerability that could sneak malw… Continue reading Just Opening A Document in LibreOffice Can Hack Your Computer (Unpatched)

Silk Road Admin Sentenced to 78 Months in Prison On Drug Trafficking Charges

An Irish national has been jailed for six-and-a-half years for his role as one of the administrators and forum moderators who helped run now-defunct dark web marketplace “Silk Road.”

Gary Davis, 31, of Wicklow, Ireland, was known as ‘Libertas’ on the … Continue reading Silk Road Admin Sentenced to 78 Months in Prison On Drug Trafficking Charges

New Android Spyware Created by Russian Defense Contractor Found in the Wild

Cybersecurity researchers have uncovered a new piece of mobile surveillance malware believed to be developed by a Russian defense contractor that has been sanctioned for interfering with the 2016 U.S. presidential election.

Dubbed Monokle, the mobile … Continue reading New Android Spyware Created by Russian Defense Contractor Found in the Wild

A New ‘Arbitrary File Copy’ Flaw Affects ProFTPD Powered FTP Servers

A German security researcher has publicly disclosed details of a serious vulnerability in one of the most popular FTP server applications, which is currently being used by more than one million servers worldwide.

The vulnerable software in question is… Continue reading A New ‘Arbitrary File Copy’ Flaw Affects ProFTPD Powered FTP Servers

Slack Resets Passwords For Users Who Hadn’t Changed It Since 2015 Breach

If you use Slack, a popular cloud-based team collaboration server, and recently received an email from the company about a security incident, don’t panic and read this article before taking any action.

Slack has been sending a “password reset” notific… Continue reading Slack Resets Passwords For Users Who Hadn’t Changed It Since 2015 Breach

EvilGnome: A New Backdoor Implant Spies On Linux Desktop Users

Security researchers have discovered a rare piece of Linux spyware that’s currently fully undetected across all major antivirus security software products, and includes rarely seen functionalities with regards to most Linux malware, The Hacker News lea… Continue reading EvilGnome: A New Backdoor Implant Spies On Linux Desktop Users

New Attack Lets Android Apps Capture Loudspeaker Data Without Any Permission

Earlier this month, The Hacker News covered a story on research revealing how over 1300 Android apps are collecting sensitive data even when users have explicitly denied the required permissions.

The research was primarily focused on how app developer… Continue reading New Attack Lets Android Apps Capture Loudspeaker Data Without Any Permission

Zoom RCE Flaw Also Affects Its Rebranded Versions RingCentral and Zhumu

The same security vulnerabilities that were recently reported in Zoom for macOS also affect two other popular video conferencing software that under the hood, are just a rebranded version of Zoom video conferencing software.

Security researchers confi… Continue reading Zoom RCE Flaw Also Affects Its Rebranded Versions RingCentral and Zhumu