Update Google Chrome Browser to Patch New Critical Security Flaws

Google has released an urgent software update for its Chrome web browser and is urging Windows, Mac, and Linux users to upgrade the application to the latest available version immediately.

Started rolling out to users worldwide this Wednesday, the Chr… Continue reading Update Google Chrome Browser to Patch New Critical Security Flaws

Warning: Researcher Drops phpMyAdmin Zero-Day Affecting All Versions

A cybersecurity researcher recently published details and proof-of-concept for an unpatched zero-day vulnerability in phpMyAdmin—one of the most popular applications for managing the MySQL and MariaDB databases.

phpMyAdmin is a free and open source ad… Continue reading Warning: Researcher Drops phpMyAdmin Zero-Day Affecting All Versions

Adobe Releases Security Patches For Critical Flash Player Vulnerabilities

It’s Patch Tuesday again—the day of the month when both Adobe and Microsoft release security patches for vulnerabilities in their software.

Adobe has just released its monthly security updates to address a total of 3 security vulnerabilities in only t… Continue reading Adobe Releases Security Patches For Critical Flash Player Vulnerabilities

Facebook Patches “Memory Disclosure Using JPEG Images” Flaws in HHVM Servers

Facebook has patched two high-severity vulnerabilities in its server application that could have allowed remote attackers to unauthorisedly obtain sensitive information or cause a denial of service just by uploading a maliciously constructed JPEG image… Continue reading Facebook Patches “Memory Disclosure Using JPEG Images” Flaws in HHVM Servers

Multiple Code Execution Flaws Found In PHP Programming Language

Maintainers of the PHP programming language recently released the latest versions of PHP to patch multiple high-severity vulnerabilities in its core and bundled libraries, the most severe of which could allow remote attackers to execute arbitrary code … Continue reading Multiple Code Execution Flaws Found In PHP Programming Language

Google Fined $170 Million For Violating Kids’ Privacy On YouTube

Google has finally agreed to pay $170 million fine to settle allegations by the Federal Trade Commission and the New York attorney general that its YouTube service earned millions by illegally harvesting personal information from children without their… Continue reading Google Fined $170 Million For Violating Kids’ Privacy On YouTube

Exploit Reseller Offering Up To $2.5 Million For Android Zero-Days

Well, there’s some good news for hackers and vulnerability hunters, though terrible news for Google, Android device manufacturers, and their billions of users worldwide.

The zero-day buying and selling industry has recently taken a shift towards Andro… Continue reading Exploit Reseller Offering Up To $2.5 Million For Android Zero-Days

Ransomware Hits Dental Data Backup Service Offering Ransomware Protection

THIS WEEK IN THE IRONIC NEWS:

DDS Safe, an online cloud-based data backup system that hundreds of dental practice offices across the United States are using to safeguard medical records and other information of their patients from ransomware attacks h… Continue reading Ransomware Hits Dental Data Backup Service Offering Ransomware Protection

Capital One Hacker Also Accused of Hacking 30 More Companies and CryptoJacking

Former Amazon employee Paige Thompson, who was arrested last month in relation to the Capital One data breach, has been accused of hacking not only the U.S. credit card issuer, but also more than 30 other companies.

An indictment unsealed on Wednesday… Continue reading Capital One Hacker Also Accused of Hacking 30 More Companies and CryptoJacking

Imperva Breach Exposes WAF Customers’ Data, Including SSL Certs, API Keys

Imperva, one of the leading cybersecurity startups that helps businesses protect critical data and applications from cyberattacks, has suffered a data breach that has exposed sensitive information for some of its customers, the company revealed today.
Continue reading Imperva Breach Exposes WAF Customers’ Data, Including SSL Certs, API Keys