The latest firmware update released by Western Digital for the My Cloud Mirror personal cloud storage product patches serious remote command execution and authentication bypass vulnerabilities.
read more
Cisco Buys App Performance Tuning Startup for $3.7 Billion
San Francisco – Cisco Systems on Tuesday announced a $3.7 billion deal to buy a startup specializing in improving the performance of applications, continuing to expand beyond computer networking hardware.
read more
Dutch Man on Trial in ‘Sextortion’ Cyberbully Case
Amsterdam – A man accused of a worldwide cyberbullying racket that got young girls to pose naked before blackmailing them went on trial Wednesday in Amsterdam, saying he is innocent of the charges.
read more
Hiding in Plain Sight: Why Your Organization Can’t Rely on Security by Obscurity
Attackers Don't Examine Market Size When Deciding Whether or Not to Target an Organization or a Person
read more
Firefox 51 Patches Flaws, Introduces New HTTP Warning
Mozilla released Firefox 51 this week and in addition to patches for several critical vulnerabilities, the latest version of the popular web browser introduces a new security feature designed to warn users when they access a login page that does not have a secure connection.
read more
Flaw Exposed Private Messages of AlphaBay Users
The popular darknet marketplace AlphaBay was until recently affected by a flaw that exposed hundreds of thousands of private messages and other user information.
read more
Sage 2.0 Ransomware Demands $2,000 Ransom
A newly observed ransomware variant is being distributed via malicious spam normally distributing Cerber and is demanding a $2,000 ransom for the decryption key.
read more
Microsoft Victory in Overseas Data Privacy Case Stands
San Francisco – A federal appeals court on Tuesday reaffirmed Microsoft's legal right to refuse a US government order to hand over data stored overseas in a case with important privacy implications.
read more
IoT Botnets Fuel DDoS Attacks Growth: Report
The weaponization of Internet of Things (IoT) botnets helped fuel a 60% increase in the size of distributed denial of service (DDoS) attacks last year, Arbor Networks reports.
read more
Comments Widget Exposed Many Websites to Attacks
A stored cross-site scripting (XSS) vulnerability found in a popular comments widget exposed a large number of websites to attacks. The security hole was quickly patched by the product’s developers.
A 14-year-old security enthusiast named Ibram Marzouk recently discovered a stored XSS flaw in the comments section of code snippet marketplace PasteCoin.
read more
