JSON hijacking for the modern web
2016-11-30
Benjamin Dumke-von der Ehe found an interesting way to steal data cross domain. Using JS proxies he was able to create a handler that could steal undefined JavaScript variables. ThisRead More →
Firefox 0day in the wild is being used to attack Tor users
2016-11-30
Publicly released exploit works reliably against a wide range of Firefox versions. There’s a zero-day exploit in the wild that’s being used to execute malicious code on the computers ofRead More →
PAYPAL FIXES OAUTH TOKEN LEAKING VULNERABILITY
2016-11-29
PayPal fixed an issue that could have allowed an attacker to hijack OAuth tokens associated with any PayPal OAuth application. The vulnerability was publicly disclosed on Monday by Antonio Sanso,Read More →
An audit revealed dozen vulnerabilities in the cURL
2016-11-29
Security experts who conducted an audit on cURL discovered nearly a dozen vulnerabilities that were patched in the last release. The cURL (read “see URL”) is an open source command line toolRead More →
The Kangaroo Ransomware not only Encrypts your Data but tries to Lock you out of Windows
2016-11-29
The Kangaroo ransomware is the latest ransomware from the developer behind the Apocalypse Ransomware, Fabiansomware, and Esmeralda. What makes this version stand out a bit more is the use ofRead More →
San Francisco Rail System Hacker Hacked
2016-11-29
The San Francisco Municipal Transportation Agency (SFMTA) was hit with a ransomware attack on Friday, causing fare station terminals to carry the message, “You Hacked. ALL Data Encrypted.” Turns out, theRead More →
Newly discovered router flaw being hammered by in-the-wild attacks
2016-11-29
Researchers detect barrage of exploits targeting potentially millions of devices.Online criminals—at least some of them wielding the notorious Mirai malware that transforms Internet-of-things devices into powerful denial-of-service cannons—have begun exploitingRead More →
Hacker found issues in Uber UberCENTRAL Tool that exposed user data
2016-11-28
Bounty hunter Kevin Roh has discovered several security vulnerabilities in the Uber UberCENTRAL Tool that exposed user data. Security expert and bounty hunter Kevin Roh has discovered several security vulnerabilities in Uber’s UberRead More →
Tesla cars can be stolen by hacking the app
2016-11-26
Our researchers have demonstrated that because of lack of security in the Tesla smartphone app, cyber criminals could take control of the company’s vehicles, to the point where they canRead More →
Hackers Hijack Madison Square Garden Payment Systems, Credit Card Data at Risk
2016-11-25
MSG acknowledges attack aimed at its payment systems. “If you used the credit card to pay for items at Madison Square Garden you might want to check your account balanceRead More →
