LATEST NEWS
North Korean Hackers Exact Revenge On Defectors With Data-Stealing Android Malware
Over 1,000 North Korean citizens try to defect to South Korea each and every year, and for each of them, the sudden sense of freedom must …
Joomla EkRishta 2.10 Cross Site Scripting / SQL Injection
Joomla EkRishta component version 2.10 suffers from cross site scripting and remote SQL injection …
D-Link DSL-3782 Authentication Bypass
D-Link DSL-3782 suffers from an authentication bypass …
North Korean Hackers Exact Revenge On Defectors With Data Stealing Android Malware
Over 1,000 North Korean citizens [try to] defect to the south each and every year, and for each of them, the sudden sense of freedom must …
New Generation of Big Data Security Risks Raises Questions About VPNs
For many organizations, big data is a treasure trove of valuable insights. For other stakeholders, it is a privacy …
The Chrome Browser’s Website Security Warnings Are Changing
Google is changing the way information about website security is displayed to users of its Chrome browser. Currently, the URLs of websites …
You Can Send Invisible Messages With Subtle Font Tweaks
for the deeper meaning of an essay or article, consider the possibility that it may not be in the words themselves, but hidden in the shape …
Hackers Launching Massive Cyber Attack Against 800,000 DrayTek Routers by Exploiting zero-day Vulnerability
The new attack that being launched by cyber criminals against DrayTek Routers where they could Exploiting zero-day Vulnerability to …
FCC investigates LocationSmart website for leaking location data for users of major US mobile carriers
LocationSmart, a company based in Southern California, is under investigation by the FCC after it was discovered that its website made it …
Blockchain At Cisco Live Orlando
BackgroundThe rise of the API economy has transformed how we use technology in the enterprise, but while technology has advanced, methods …
PCI DSS Version 3.2.1 Released – Changes that You Need to Know About PCI Data Security
PCI Security Standards Council (PCI SSC) published PCI DSS Version 3.2.1 with minor revision to the PCI Data Security Standard (PCI DSS), …
GET /Compliance and Why You Should Care
I’ve heard the phrase “compliance is hard” thrown around here lately at Cloud Elements and yes, it is hard — I think that we can all …
Man Sentenced to 15 Years in Prison For Launching DDoS Attacks on Companies Websites that Declined to Hire Him
A Man From New Mexico sentenced to 15 Years in Prison for Attacks on various victims including business competitors , prior employers …
CVE-2018-4942 – Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versio …
Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity …
CVE-2018-4930 – Adobe Experience Manager versions 6.3 and earlier have an exploitable Cross-site scripting …
Adobe Experience Manager versions 6.3 and earlier have an exploitable Cross-site scripting vulnerability. Successful exploitation could …
CVE-2018-4919 – Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vuln …
Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability. Successful exploitation could lead to …
Blunder burns unicorn attack that exploited Windows and Reader
It’s not every day someone develops a malware attack that, with one click, exploits separate zero-day vulnerabilities in two widely …
Whistleblower: Bannon Sought To Suppress Black Voters With Cambridge Analytica
As part of continuing fallout around Facebook and the data consulting firm Cambridge Analytica, whistleblower Christopher Wylie told …
A Mugshots.com Indictment, Lost Grenades, and More Security News This Week
the case, it was a week of mixed messages in security, with the White House eliminating its top cybersecurity policy roles at a crucial …
A Location-Sharing Disaster Shows How Exposed You Really Are
of guides available on how to protect your data, how to secure yourself online, and how to stop digital snoops from tracking you across the …
DevOps Security at Scale (Part 6): Technology Adoption
This is the sixth and final blog post in a series discussing how high-performing DevOps teams build secure systems at scale. Technology …
A dataset of 200 million PII exfiltrated from several Japanese websites offered on underground market
FireEye iSIGHT Intelligence discovered on the underground market a dataset allegedly containing 200 million unique sets of personally …
Signal bugs, car hack antics, the Adobe flaw you may have missed, and much more
Roundup Here’s your guide to this week’s infosec news beyond what we’ve already covered. ICE’s extreme vetting plan melts away US Customs …
WinstarNssmMiner – A Brutal Computer Crypto-Hijacker Attack Victims over 500,000 Times in 3 days
Newly discovered Dangerous CryptoMiner called WinstarNssmMiner rapidly spreading and generate huge revenue via mining Monero on infected …
Android Gamers Beware of Fake Fortnite Game that Contains Spyware and Cryptocurrency Miner
Android malware posing as Fake Fortnite Game includes spyware, cryptocurrency miner and install unwanted apps that show ads to generate …
Cisco fixes critical ‘DNA’ software flaws
IT giant Cisco this week released patches for three critical vulnerabilities in its enterprise networking software, two of which could …
Blockchain Is Over-Hyped … And A $4 Quadrillion Opportunity: Vonage Founder Jeff Pulver
Blockchain technology is over-hyped. And, it’s a $4 quadrillion …
LA County data leak exposes personal information of callers to crisis and abuse line
A mistake on the part of whoever is in charge of the LA County 2-1-1 System’s database exposed 3.2 million files containing terrifyingly …
Streaming Service Tidal May Be Dealing With A Data Breach
Earlier this month a report published in a Norwegian newspaper claimed that music and video service Tidal was inflating its streaming …
A Short-Term Suspension of GDPR Enforcement on WHOIS May Be Necessary, Says U.S. Government
Implementation of European Union’s General Data Protection Regulation, or GDPR, is a major concern of our government, said David Redl …
Small-Business Owners Unaware of Looming GDPR
With only a week remaining before the General Data Protection Regulation (GDPR) goes into effect across the European Union, nearly a …
Actor Advertises Japanese PII on Chinese Underground
A dataset containing more than 200 million lines of Japanese personally identifiable information (PII) has been found on the Chinese …
Vonage Founder Jeff Pulver: Blockchain Is Over-Hyped … And A $4 Quadrillion Opportunity
Blockchain technology is over-hyped. And, it’s a $4 quadrillion …
Can a Cognitive-Powered Security Intelligence Platform Bring Your SOC Up to Speed?
A security intelligence platform goes beyond what a traditional security information and event management (SIEM) tool does. The systems and …
A New Mexico man sentenced to 15 Years in jail for DDoS Attacks and possession of firearms
A New Mexico man admitted being responsible for DDoS attacks against the websites of former employers, business competitors, and public …
T-Mobile Employee Made Unauthorized ‘SIM Swap’ to Steal Instagram Account
T-Mobile is investigating a retail store employee who allegedly made unauthorized changes to a subscriber’s account in an elaborate …