Cisco last week prompted a password reset for the user accounts on its Cisco Professional Careers mobile website after a security researcher discovered a vulnerability in the portal.
read more
RCE Flaw Found in Bopup Enterprise Messaging Tool
Trustwave has disclosed an unpatched remote code execution (RCE) vulnerability affecting Bopup Communication Server, a solution that allows enterprises to manage and control their IM communications.
read more
Microsoft Delays Retirement of EMET
Microsoft has announced that it will retire the Enhanced Mitigation Experience Toolkit (EMET) 18 months later than initially planned.
read more
Flaws Found in Moxa Industrial Ethernet Products
A researcher has discovered a couple of critical and medium severity vulnerabilities affecting various industrial ethernet products from Taiwan-based industrial networking, computing and automation solutions provider Moxa.
read more
20,000 Lose Money in Tesco Bank Hack
Tesco Bank, wholly owned by the UK's largest supermarket chain Tesco, has admitted the "some of its customers' current accounts have been subject to online criminal activity, in some cases resulting in money being withdrawn fraudulently." Nothing more specific about the fraud has been made known, although some reports suggest as many as 20,000 customers may have lost money.
read more
20,000 Defrauded as UK’s Tesco Bank Hit by Hack Attack
Britain's Tesco Bank temporarily froze all online transactions Monday after around 20,000 customers had money stolen from their accounts in a hack attack.
The bank, a subsidiary of British supermarket giant Tesco, the kingdom's biggest retailer, said it was trying to refund accounts as quickly as possible.
read more
Extending the Perimeter: Protecting Employees to Protect the Enterprise
In the early days of computing the cyber-security perimeter and the physical security perimeter were one and the same. Access to data implied access to the actual computer or storage media. From there we graduated to closed networks where computers only talked to each other within a building or private network but quickly modems started to allow access by people outside those controlled spaces. The age of the hacker had begun.
read more
Critical Privilege Escalation Flaws Found in MySQL
Database management systems MySQL, MariaDB and PerconaDB are affected by a couple of serious privilege escalation vulnerabilities. The developers of the vulnerable software have released updates to address the flaws.
read more
China Passes Controversial Cybersecurity Law
China Monday passed a controversial cybersecurity bill tightening restrictions on online freedom of speech and imposing new rules on online service providers, raising concerns it is further cloistering its heavily controlled internet.
read more
Russia Demands Explanation for US Military Hacking Reports
Moscow has asked Washington to provide clarifications on reports that the U.S. military has hacked into Russia’s critical infrastructure and its intention to leverage this access to retaliate in case of serious disruptions to the upcoming elections.
read more
