AWS Public Sector Summit 2017: Cloud Super Powers and Security

Coalfire recently returned from the Amazon Web Services AWS Public Sector Summit, held in Washington, D.C., which addresses some of the most pressing issues todays leaders face around security, governance and compliance, and more. While Coalfire has attended the show in the past, we were especial...

Cheers to a successful time at Infosec Europe 2017

With over 350 exhibitors, well over 10,000 visitors, and many widely respected speakers, Infosec Europe is one of Europe's biggest security events. The Malwarebytes stand attracted a lot of interested people, even without our robot Zero, who had obligations elsewhere. The new EMEA Channel...

WannaCry Ransomware That's Hitting World Right Now Uses NSA Windows Exploit

Update — After reading this article, if you want to know, what has happened so far in past 4 days and how to protect your computers from WannaCry, read our latest article "WannaCry Ransomware: Everything You Need To Know Immediately." Earlier today, a massive ransomware campaign hit computer...

WordPress WebDorado Gallery 1.3.29 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Source: http://www.defensecode.com/advisories/DC-2017-02-011WordPressWebDoradoGalleryPluginAdvisory.pdf DefenseCode ThunderScan SAST Advisory WordPress WebDorado Gallery Plugin - SQL Injection Vulnerability Advisory ID: DC-2017-02-011 Software...

Los Angeles College Pays Hackers $28,000 Ransom To Get Its Files Back

Ransomware has turned on to a noxious game of Hackers to get paid effortlessly. Once again the heat was felt by the Los Angeles Valley College LAVC when hackers managed to infect its computer network with ransomware and demanded US$28,000 payment in Bitcoins to get back online. The cyber-attack...

Google Project Zero Prize Pays $200,000 for Critical Vulnerability Chains

Apple isn’t the only one offering up a $200,000 reward for severe vulnerabilities on mobile devices. Google followed suit yesterday with the announcement of the Project Zero Prize, and like the Apple Security Bounty, the top payout is $200,000. Announced by Google’s Project Zero research team, th...

This Open Source 25-Core Processor Chip Can Be Scaled Up to 200,000-Core Computer

Researchers have designed a new computer chip that promises to boost the performance of computers and data centers while processing applications in parallel. Princeton University researchers have developed a 25-core open source processor, dubbed Piton named after the metal spikes used by rock...

ATMs in Thailand Hacked; 12 Million Baht Stolen; 10,000 ATMs Prone to Hackers

Thailand has suffered its first ATM Hack! An Eastern European gang of criminals has stolen over 12 Million Baht approximately US$350,000 from a total of 21 ATMs in Bangkok and other five provinces by hacking a Thai bank's ATM network; police said Wednesday The Central Bank of Thailand BoT has...

Apple Launches Bug Bounty with Maximum $200,000 Reward

LAS VEGAS—Apple closed out Black Hat today with a long-awaited announcement that next month it will launch a bug bounty. The Apple Security Bounty will be an invitation-only program, open to two dozen researchers at the outset, said Ivan Krstic, head of security engineering and architecture. The...

Pornhub Launches Bug Bounty Program; Offering Reward up to $25,000

With the growing number of cyber attacks and data breaches, a significant number of companies and organizations have started Bug Bounty Programs to encourage hackers and security researchers to find and responsibly report bugs in their services and get a reward. Now, even pornography sites are...

Learn Swedish 6,000 Words - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Learn Swedish 6,000 Words published at the 'play' market has multiple vulnerabilities...

Learn Spanish 6,000 Words - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Learn Spanish 6,000 Words published at the 'play' market has multiple vulnerabilities...

Learn German 6,000 Words - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Learn German 6,000 Words published at the 'play' market has multiple vulnerabilities...

FBI Most Wanted — Three 'Syrian Electronic Army' Hackers Charged for Cyber Crime

Syrian Electronic Army SEA Hackers have made their place on the FBI's Most Wanted List. The US Department of Justice and the Federal Bureau of Investigation FBI are willing to pay $100,000 reward for any information that leads to the arrest of the heads of the infamous hacking group Syrian...

Design/Logic Flaw

The proxy engine on Cisco Web Security Appliance WSA devices with software 8.5.3-055, 9.1.0-000, and 9.5.0-235 allows remote attackers to bypass intended proxy restrictions via a malformed HTTP method, aka Bug ID CSCux00848...

19-Year-Old Teen Steals $150,000 by Hacking into Airline's Website

What do you do to earn up to $150,000? Somebody just hacks into airlines and sells fake tickets. That's exactly what a 19-year-old teenager did and made approximately 1.1 Million Yuan £110,000 or $150,000 by hacking into the official website of an airline and using the stolen booking information ...

CVE-2015-6288

CVE-2015-6288 affects Cisco Content Security Management Appliance (SMA) 7.8.0-000. The issue is a web-interface vulnerability where insufficient validation of credentials for incoming HTTP requests allows unauthenticated remote attackers to trigger a denial-of-service via rapid log-file rollover,...

WordPress NewStatPress Plugin 0.9.8 xss+sql注入

主题地址：https://wordpress.org/plugins/newstatpress/影响版本：0.9.8Active installs: 20,000+CVE: CVE-2015-4062, CVE-2015-40631）sql注入 CWE-89 CVE-2015-4062 CODE:includes/nspsearch.php:94for$i=1;$i=3;$i++ if$GET"what$i" != '' && $GET"where$i" != '' $where.=" AND ".$GET"where$i"." LIKE '%".$GET"what$i"."%'";...

IRS Hack May Implicate 334,000 Taxpayers

The Internal Revenue Service disclosed this week that following the latest review of its system, 334,000 taxpayers – more than three times the agency’s initial estimate – may be affected by the hack it announced in May. Through the compromise, hackers were able to infiltrate the agency’s Get...

Bitcoin Cloud Mining Service Hacked; Database On Sale for Just 1 Bitcoin

Bitcoin Cloud Mining service Cloudminr.io has been hacked and its whole users database is on sale for 1 Bitcoin. The unknown hackers have successfully taken full control of the website's server and defaced the homepage of the website. Users visiting the website are greeted with a defaced homepage...