Thousands of Applications Vulnerable to RCE via jQuery File Upload
The flaw has existed for eight years thanks to a security change in Apache. Continue reading Thousands of Applications Vulnerable to RCE via jQuery File Upload
Author Archives: Tara Seals
Obamacare Sign-Up Channel Breach Affects 75K Consumers
A hack targeted the Direct Enrollment pathway, which allows insurance agents and brokers to help consumers sign up for Affordable Care Act coverage. Continue reading Obamacare Sign-Up Channel Breach Affects 75K Consumers
New APT Could Signal Reemergence of Notorious Comment Crew
A custom malware used in a five-pronged APT espionage campaign was largely built from the defunct Comment Crew’s proprietary code. Continue reading New APT Could Signal Reemergence of Notorious Comment Crew
GreyEnergy Spy APT Mounts Sophisticated Effort Against Critical Infrastructure
The group is a successor to BlackEnergy and a subset of the TeleBots gang–and its activity is potentially a prelude to a much more destructive attack. Continue reading GreyEnergy Spy APT Mounts Sophisticated Effort Against Critical Infrastructure
libssh Authentication Bypass Makes it Trivial to Pwn Rafts of Servers
The flaw affects thousands of servers; but GitHub, a major libssh user, is unaffected. Continue reading libssh Authentication Bypass Makes it Trivial to Pwn Rafts of Servers
Multiple D-Link Routers Open to Complete Takeover with Simple Attack
The vendor only plans to patch two of the eight impacted devices, according to a researcher. Continue reading Multiple D-Link Routers Open to Complete Takeover with Simple Attack
Remote Code Implantation Flaw Found in Medtronic Cardiac Programmers
The flaw impacted patients with pacemakers, implantable defibrillators, cardiac resynchronization devices and insertable cardiac monitors. Continue reading Remote Code Implantation Flaw Found in Medtronic Cardiac Programmers
Anthem, Apple and the Pentagon: A Data-Breach Cornucopia
A record fine and two new compromises kick off the autumn compromise season. Continue reading Anthem, Apple and the Pentagon: A Data-Breach Cornucopia
ThreatList: Half of Execs Feel Unprepared to Respond to a Cyber-Incident
Deloitte estimates cybercrime costs to reach $6 trillion annually — but companies still lag in preparedness. Continue reading ThreatList: Half of Execs Feel Unprepared to Respond to a Cyber-Incident
Facebook Expands Efforts to Squash Voter Suppression
The social network will crack down on those spreading disinformation in an effort to keep people away from the polls. Continue reading Facebook Expands Efforts to Squash Voter Suppression