Collaborate Disseminate
A critical remote code execution vulnerability has been discovered in the popular open-source Exim email server software, leaving at least over half a million email servers vulnerable to remote hackers.
Exim maintainers today released Exim version 4.9… Continue reading Exim TLS Flaw Opens Email Servers to Remote ‘Root’ Code Execution Attacks
Beware! Billion of Android users can easily be tricked into changing their devices’ critical network settings with just an SMS-based phishing attack.
Whenever you insert a new SIM in your phone and connects to your cellular network for the very first … Continue reading Just An SMS Could Let Remote Attackers Access All Your Emails, Experts Warn
XKCD—one of the most popular webcomic platforms known for its geeky tech humor and other science-laden comic strips on romance, sarcasm, math, and language—has suffered a data breach exposing data of its forum users.
The security breach occurred two m… Continue reading XKCD Forum Hacked – Over 562,000 Users’ Account Details Leaked
Enterprise servers powered by Supermicro motherboards can remotely be compromised by virtually plugging in malicious USB devices, cybersecurity researchers at firmware security company Eclypsium told The Hacker News.
Yes, that’s correct. You can launc… Continue reading BMC Vulnerabilities Expose Supermicro Servers to Remote USB-Attacks
In the wake of data abuse scandals and several instances of malware app being discovered on the Play Store, Google today expanded its bug bounty program to beef up the security of Android apps and Chrome extensions distributed through its platform.
Th… Continue reading Google Will Now Pay Anyone Who Reports Apps Abusing Users’ Data
So, here’s a thought…At a well-attended DFIR conference, there should be a DFIR open mic comedy night. In the evening, after the event is done for the day, use the venue for something a little light-hearted. For example, OSDFCon has had a mixer… Continue reading DFIR Open Mic Night
The French law enforcement agency, National Gendarmerie, today announced the successful takedown of one of the largest wide-spread RETADUP botnet malware and how it remotely disinfected more than 850,000 computers worldwide with the help of researchers… Continue reading French Police Remotely Removed RETADUP Malware from 850,000 Infected PCs
Apple just patched an unpatched flaw that it patched previously but accidentally unpatched recently — did I confuse you?
Let’s try it again…
Apple today finally released iOS 12.4.1 to fix a critical jailbreak vulnerability, like it or not, that was… Continue reading Apple Releases iOS 12.4.1 Emergency Update to Patch ‘Jailbreak’ Flaw
In a move to protect its users based in Kazakhstan from government surveillance, Google, Apple and Mozilla finally today came forward and blocked Kazakhstan’s government-issued root CA certificate within their respective web browsing software.
Startin… Continue reading Google, Mozilla, Apple Block Kazakhstan’s Root CA Certificate to Prevent Spying
Following the public disclosure of a critical zero-day vulnerability in Webmin last week, the project’s maintainers today revealed that the flaw was not actually the result of a coding mistake made by the programmers.
Instead, it was secretly planted … Continue reading Hackers Planted Backdoor in Webmin, Popular Utility for Linux/Unix Servers