Pwn2Own 2016 contestants hacked Apple Safari, Adobe Flash Player and Google Chrome, and earned more than $280,000 on the first day of the competition taking place this week alongside the CanSecWest conference in Vancouver, Canada.
read more
American Express Warns Cardholders of Data Breach
American Express informed customers last week that their payment card information may have been compromised after a third party service provider suffered a data breach.
read more
Malvertising Campaign Hits Top Global Websites
A recent malvertising campaign leveraging the Angler exploit kit (EK) has hit many top websites, including news sites, entertainment portals, and political commentary sites.
read more
iOS Malware “AceDeceiver” Exploits Flaw in Apple DRM
Researchers have discovered a new iOS malware family that abuses design flaws in Apple’s FairPlay digital rights management (DRM) technology to infect devices, even ones that haven’t been jailbroken.
read more
Breach at DDoS Protection Firm Staminus Exposes 2,300 Clients
Last week, distributed denial of service (DDoS) protection company Staminus was breached in an attack that appears to have impacted roughly 2,300 current and past customers.
read more
Cybersecurity Needs a Moonshot!
read more
Continue readingDefunct iPhone App Exposes Details of 198,000 Users
A researcher discovered an unprotected database storing the details of 198,000 users who had signed up for a now-defunct iOS application.
A misconfigured MongoDB database associated with the iPhone app Kinotopic was discovered by Chris Vickery, a researcher who currently works at Kromtech, the company behind MacKeeper.
read more
Faulty Printer Implicated in $81 Million Bangladesh Bank Heist
A printer fault at Bangladesh's central bank meant that overseas queries about suspicious transactions went unanswered, according to a report seen by AFP Wednesday on the $81 million cyber heist that sent shockwaves through the banking world.
read more
“Celebgate” Attacker Charged Over iCloud Photo Hacks
A Pennsylvania man was charged on Tuesday for accessing the Apple and Google email accounts of over 100 people, including several celebrities.
read more
VMware Patches XSS Flaws in vRealize
VMware announced on Tuesday that it released patches for the Linux version of two vRealize products in order to address cross-site scripting (XSS) vulnerabilities.
read more

