Collaborate Disseminate
Two IP cameras sold by Loftek and VStartcam are leaving over 1.3 million users open to 21 vulnerabilities that range from a lack of HTTPS encryption to bugs that open users up to cross-site request forgery attacks. Continue reading Two Popular IP Cameras Riddled With Vulnerabilities
Two IP cameras sold by Loftek and VStartcam are leaving over 1.3 million users open to 21 vulnerabilities that range from a lack of HTTPS encryption to bugs that open users up to cross-site request forgery attacks. Continue reading Two Popular IP Cameras Riddled With Vulnerabilities
Amazon said it will halt sale of popular low-cost Android phones made by Blu Products because of reports software on the phone is collecting and sharing user data without owner consent. Continue reading Amazon Halts Sale of Android Blu Phone Amid Spyware Concerns
Makers of Copyfish OCR software get taken on wild ride after code for its Chrome extension is stolen. Continue reading Copyfish Browser Extension Hijacked to Spew Spam
Hackers at DEF CON last week exploited vulnerabilities in electronic pollbooks and voting machines with ease. Continue reading Voting Machines Hacked with Ease at DEF CON
Google’s top Android engineer describes how the attack surface is shrinking on the mobile operating system. Continue reading How Google Shrunk The Android Attack Surface
MedSec CEO Justine Bone said shorting companies to profit off discovered vulnerabilities is a viable business model for the security community. Continue reading Shorting-For-Profit Viable Business Model For Security Community
Abuse of the Docker API allows remote code execution on targeted system, which enables hackers to escalate and persists thanks to novel attacks called Host Rebinding Attack and Shadow Containers. Continue reading Attack Uses Docker Containers To Hide, Persist, Plant Malware
A ransomware study released Google revealed the malware earned criminals $25 million over the past two years. Continue reading Google Study Quantifies Ransomware Profits
APT Cobalt Gypsy or OilRig, used a fake persona called “Mia Ash” to ensnare tech-savvy workers in the oil and gas industry into downloading PupyRAT malware. Continue reading APT Group Uses Catfish Technique To Ensnare Victims