SQL (Structured Query Language) is a popular programming language for managing data kept in relational databases. However, the databases can be breached when an attacker adds SQL statements that attemptRead More →
Each security analysis of a web application must include the steps recommended by computer security experts. The vulnerability analysis tools developed by the International Institute of Cyber Security follow theRead More →
In May, security experts found vulnerability in the LocationSmart website that allowed, without authentication, to obtain the real-time location of cell phones in the United States. The vulnerability has beenRead More →
Google launched a free DDoS protection platform named Project Shield, to protect news sites and freedom of expression, with the aim of defending democratic processes. According to information security researchers, this newRead More →
The professionals explain that DNSBin is a tool used to test the filtering of data through DNS and helps to test vulnerabilities such as RCE or XXE when the environmentRead More →
A former CIA engineer is being accused of handing the documents from the Vault 7 series to WikiLeaks. The US government claims to have identified the malicious actor who allegedlyRead More →
A joint work of Chinese and American information security professionals found a new method to attack smart personal assistants like Amazon Alexa and Google Home, whom they called “squatting voice”.Read More →
The login details of a company that buys phone location data from major telecom companies have been provided and then sold to the police. According to information security experts, a hacker brokeRead More →
Red Hat recently announced a severe vulnerability in its DHCP client, CVE-2018-1111 could be exploited by malicious actors to execute arbitrary commands with administrator privileges on specific systems. A memberRead More →
Information security experts at the Kromtech Security Center found personal and confidential data belonging to between 15,000 and 20,000 Indian participants from the 2015-2018 cricket seasons. The authority that should protectRead More →
Today, we are all aware of the means that governments use to spy on citizens, but this should not be so simple. To allow surveillance; by law, authorities must provideRead More →
Recently, Lenovo released security patches for the CVE-2017-3775 high-severity vulnerability in the Secure Boot function on System x servers. Information security researchers commented that standard operator settings disable signature verification, asRead More →
Researchers found a hidden malware inside the software in the Ubuntu Snap store. The information security experts found that two applications, which appeared to be normal, hosted by Canonical, containedRead More →
A team of information security experts released a warning about a group of vulnerabilities that affect users of PGP and S / MIME. EFF kept in communication with the research group andRead More →
In late April, two security companies (Qihoo360 and Kaspersky) independently discovered a zero-day for Internet Explorer (CVE-2018-8174), which was used in targeted attacks for espionage purposes. This marks two years since aRead More →
The Process Doppelgänging technique was first presented in December 2017 at the BlackHat conference. Since the presentation several threat actors have started using this sophisticated technique in an attempt to bypass modernRead More →
A team of information security experts explains that a domain name represents some kind of label for IP addresses on the Internet. Since some companies move their infrastructure to theRead More →
A team of researchers from Vrije University in Amsterdam and the University of Cyprus found a way to launch Rowhammer attacks through network packets and network cards. This, according toRead More →
IBM recently banned all removable storage, throughout the company; this is a new policy that aims to avoid financial and reputational damage from a lost or misused USB drive. ShamlaRead More →
Just a couple of months ago, an information security expert, nicknamed LANDAVE or Dave, found security vulnerability in the 7-Zip utility. A group of information security professionals commented that 7-ZipRead More →
