Author Archives: Tom Spring

Sony Smart TV Bug Allows Remote Access, Root Privileges

Posted on October 5, 2018 by Tom Spring

Software patching becomes a new reality for smart TV owners. Continue reading Sony Smart TV Bug Allows Remote Access, Root Privileges→

ThreatList: 83% of Routers Contain Vulnerable Code

Posted on October 4, 2018 by Tom Spring

Five out of six name brand routers, such as Linksys, NETGEAR and D-Link, contain known open-source vulnerabilities. Continue reading ThreatList: 83% of Routers Contain Vulnerable Code→

Cloud, Containers, Orchestration Big Factors in BSIMM9

Posted on October 3, 2018 by Tom Spring

A converged architecture that brings independent software vendors, cloud vendors and IoT vendors together is reshaping the security landscape. Continue reading Cloud, Containers, Orchestration Big Factors in BSIMM9→

Google Patches Critical Vulnerabilities in Android OS

Posted on October 2, 2018 by Tom Spring

The most dire vulnerability targets the Android framework and could allow an adversary to execute arbitrary code on targeted devices. Continue reading Google Patches Critical Vulnerabilities in Android OS→

Nine NAS Bugs Open LenovoEMC, Iomega Devices to Attack

Posted on October 1, 2018 by Tom Spring

Rated as high-risk vulnerabilities, these privilege-escalation flaws could allow an unauthenticated attacker to access protected content. Continue reading Nine NAS Bugs Open LenovoEMC, Iomega Devices to Attack→

iPhone XS Passcode Bypass Hack Exposes Contacts, Photos

Posted on September 28, 2018 by Tom Spring

Bypass works on iOS 12 and Apple’s latest iPhone XS model phones allowing an attacker to access contacts and photos. Continue reading iPhone XS Passcode Bypass Hack Exposes Contacts, Photos→

2018 Has Been Open Season on Open Source Supply Chains

Posted on September 26, 2018 by Tom Spring

Hackers see green field opportunities in vulnerable software supply chains. Continue reading 2018 Has Been Open Season on Open Source Supply Chains→

Once Popular Online Ad Format Opens Top Tier Sites to XSS Attacks

Posted on September 25, 2018 by Tom Spring

Online ad industry moves away from once prolific ads that are now deemed insecure because of DOM-based XSS vulnerabilities. Continue reading Once Popular Online Ad Format Opens Top Tier Sites to XSS Attacks→

Cisco Issues New Warning for 6-Month-Old Critical Bug in IOS XE

Posted on September 20, 2018 by Tom Spring

Vulnerability allowed an unauthenticated remote attacker to log in to a device at the time the system initially boots up. Continue reading Cisco Issues New Warning for 6-Month-Old Critical Bug in IOS XE→

Zero-Day Bug Allows Hackers to Access CCTV Surveillance Cameras

Posted on September 17, 2018 by Tom Spring

Firmware used in up to 800,000 CCTV cameras open to attack thanks to buffer overflow zero-day bug. Continue reading Zero-Day Bug Allows Hackers to Access CCTV Surveillance Cameras→