Web Scripting Language PHP-7 Vulnerable to Remote Exploits
2016-08-27
Exploiting server side bugs is a jackpot for hackers. Users tend to keep their data in one big pot – the server. This allows attackers to focus on one target,Read More →
Monitoring SSL traffic now everyone’s concern: A10 Networks
2016-08-26
As the uptake of SSL grows, Tim Blombery, systems engineer at A10 Networks, said threat actors are increasingly leveraging SSL-based encryption to hide malicious activity. As usage of Secure SocketsRead More →
SWEET32 Attack: 3DES and Blowfish Ciphers Considered Insecure
2016-08-26
HTTPS and VPN traffic broken with new semi-practical attack. Two scientists from the French Institute for Research in Computer Science and Automation (INRIA) have published new research that details an attackRead More →
Linux.PNScan Trojan is back to compromise routers and install backdoors
2016-08-25
The Linux Trojan Linux.PNScan is back and it is actively targeting routers based on x86 Linux in an attempt to install backdoors on them. Yesterday I wrote about a new LinuxRead More →
Over 25 million accounts stolen after Mail.ru forums hacked
2016-08-25
Two hackers were able to steal email addresses and easily crackable passwords from three separate forums in this latest hack. Over 25 million accounts associated with forums hosted by RussianRead More →
HTTPS and OpenVPN face new attack that can decrypt secret cookies
2016-08-25
More than 600 sites found to be vulnerable to demanding exploit called Sweet32. Researchers have devised a new attack that can decrypt secret session cookies from about 1 percent of theRead More →
Navis WebAccess app used by US Ports is affected by a SQL injection flaw
2016-08-24
The Navis WebAccess application used in the transportation sector worldwide is affected by a high severity SQL injection vulnerability. A software used in the US ports is affected by aRead More →
Critical Flaws Let Attackers Hijack Cellular Phone Towers
2016-08-24
During the last weeks we’ve been investigating multiple aspects of GSM security such as protocol vulnerabilities as well as source auditing the world’s most common open source software products thatRead More →
NSA-linked Cisco exploit poses bigger threat than previously thought
2016-08-24
With only a small amount of work, ExtraBacon will commandeer new versions of ASA. Recently released code that exploits Cisco System firewalls and has been linked to the National Security AgencyRead More →
Epic’s forums hacked again, with thousands of logins stolen
2016-08-23
More than 800,000 usernames and email addresses were taken, but most of the passwords aren’t readable or easily crackable. The company later confirmed. A hacker has stolen hundreds of thousandsRead More →
