Collaborate Disseminate
Cisco is warning customers of a privilege escalation flaw in Cisco CloudCenter Orchestrator systems that could allow an attacker to gain root privileges on affected systems. Continue reading Cisco Warns of Critical Flaw in CloudCenter Orchestrator Systems
Apple extended the deadline of Dec. 31 for developers adopt App Transport Security standards for applications submitted to the App Store. Continue reading Apple Delays App Transport Security Deadline
German industrial giant Siemens has provided a firmware update addressing software vulnerabilities that are found in a popular line of its Desigo PX industrial control hardware. Continue reading Siemens Patches Insufficient Entropy Vulnerability in ICS Systems
Members of the bipartisan encryption working group released a year-end report concluding that encryption backdoor laws would do more harm than good. Continue reading Congressional Group Says Encryption Backdoors Are a Bad Idea
Spammers are turning to an old technique known as hailstorm to slip past anti-spam and anti-malware filters to deliver Dridex banking malware and Locky ransomware. Continue reading New Wave of Hailstorm Spam Pelts Inboxes
Researchers have neutralized the threat of the latest strain of CryptXXX v.3 ransomware, releasing a decryption tool for unlocking files. Continue reading New Decryptor Unlocks CryptXXX v3 Files
An cybercrime group from Russia earns $3 million to $5 million daily through defrauding major U.S. websites of video ad revenue. Continue reading Fraudulent Video Ad Bot Rakes in Close to $5 Million Daily
A trove of data belonging to Ameriprise Financial was found earlier this month and included Social Security number, decryption keys and confidential internal company documents. Continue reading Insecure NAS Device Exposes 350 Ameriprise Investment Accounts
A trove of data belonging to Ameriprise Financial was found earlier this month and included Social Security number, decryption keys and confidential internal company documents. Continue reading Insecure NAS Device Exposes 350 Ameriprise Investment Accounts
A hacker offered to sell an unpatched system vulnerability in the U.S. Election Assistance Commission website on the Dark Web for “thousands” of dollars. Continue reading SQL Injection Attack is Tied to Election Commission Breach