Collaborate Disseminate
Following a series of security mishaps and data abuse through its social media platform, Facebook today expanding its bug bounty program in a very unique way to beef up the security of third-party apps and websites that integrate with its platform.
La… Continue reading Facebook Now Pays Hackers for Reporting Security Bugs in 3rd-Party Apps
Attention Linux Users!
A new vulnerability has been discovered in Sudo—one of the most important, powerful, and commonly used utilities that comes as a core command installed on almost every UNIX and Linux-based operating system.
The vulnerability in… Continue reading Sudo Flaw Lets Linux Users Run Commands As Root Even When They’re Restricted
A 39-year-old password of Ken Thompson, the co-creator of the UNIX operating system among, has finally been cracked that belongs to a BSD-based system, one of the original versions of UNIX, which was back then used by various computer science pioneers…. Continue reading UNIX Co-Founder Ken Thompson’s BSD Password Has Finally Been Cracked
Watch out Windows users!
The cybercriminal group behind BitPaymer and iEncrypt ransomware attacks has been found exploiting a zero-day vulnerability affecting a little-known component that comes bundled with Apple’s iTunes and iCloud software for Wind… Continue reading Apple iTunes and iCloud for Windows 0-Day Exploited in Ransomware Attacks
A 7-year-old critical remote code execution vulnerability has been discovered in iTerm2 macOS terminal emulator app—one of the most popular open source replacements for Mac’s built-in terminal app.
Tracked as CVE-2019-9535, the vulnerability in iTerm2… Continue reading 7-Year-Old Critical RCE Flaw Found in Popular iTerm2 macOS Terminal App
Another day, another revelation of a critical unpatched zero-day vulnerability, this time in the world’s most widely used mobile operating system, Android.
What’s more? The Android zero-day vulnerability has also been found to be exploited in the wild… Continue reading New 0-Day Flaw Affecting Most Android Phones Being Exploited in the Wild
Cases of document-based malware are steadily rising. 59 percent of all malicious files detected in the first quarter of 2019 were contained in documents.
Due to how work is done in today’s offices and workplaces, companies are among those commonly aff… Continue reading How SMBs Can Mitigate the Growing Risk of File-based Attacks
Looking for ways to unlock and read the content of an encrypted PDF without knowing the password?
Well, that’s now possible, sort of—thanks to a novel set of attacking techniques that could allow attackers to access the entire content of a password-pr… Continue reading Researchers Find New Hack to Read Content Of Password Protected PDF Files
The infamous eGobbler hacking group that surfaced online earlier this year with massive malvertising campaigns has now been caught running a new campaign exploiting two browser vulnerabilities to show intrusive pop-up ads and forcefully redirect users … Continue reading Over A Billion Malicious Ad Impressions Exploit WebKit Flaw to Target Apple Users
Remember the Simjacker vulnerability?
Earlier this month, we reported about a critical unpatched weakness in a wide range of SIM cards, which an unnamed surveillance company has actively been exploiting in the wild to remotely compromise targeted mobi… Continue reading More SIM Cards Vulnerable to Simjacker Attack Than Previously Disclosed