FTC Releases Alert on Securing Personal Information When Using Rental Vehicles

The Federal Trade Commission FTC has released recommendations for consumers to protect their personal data when using rental vehicles. Rental vehicles may contain infotainment systems that can connect with personal devices to stream music, allow hands-free calls and texts, or guide navigation...

CVE-2016-1477

Cisco Connected Streaming Analytics 1.1.1 allows remote authenticated users to discover a notification service password by reading administrative pages, aka Bug ID CSCuz92891...

CVE-2016-1477

CVE-2016-1477 affects Cisco Connected Streaming Analytics 1.1.1. A vulnerability in the administrative web interface allows remote authenticated users to read pages that include a service password used for event/notification signaling, enabling disclosure of the notification service credentials. ...

PT-2016-4824

Name of the Vulnerable Software and Affected Versions Cisco Connected Streaming Analytics version 1.1.1 Description The issue allows remote authenticated users to discover a notification service password by reading administrative pages. Recommendations For Cisco Connected Streaming Analytics...

CVE-2016-1477: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Connected Streaming Analytics 1.1.1 allows remote authenticated users to discover a notification service password by reading administrative pages, aka Bug ID CSCuz92891...

August 23, 2016 — KB3176934 (OS Build 14393.82)

None None...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Bluetooth component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges by connecting devices via Bluetooth while the main user is working...

IoT Insecurity: Top Connected Device Security Concerns

It’s a coin toss whether or not that Internet of Things device you depend on is secure. Those unacceptable 50/50 odds come from a survey by IOActive where technology professionals were asked about the security of connected devices from thermostats, security cameras to alarm systems. Those numbers...

Fiat Chrysler Launches Bug Bounty with $1.5K Payout Cap

Hacking Jeeps is about to get a lot more competitive. That’s because Jeep maker Fiat Chrysler Automobiles has launched a bug bounty program in conjunction with Bugcrowd that will payout as much as $1,500 per bug. Fiat Chrysler, the world’s No. 7 automaker, claims it will be the first Detroit...

The vulnerability of the Cisco Nexus 5000 software allows a malicious actor to trigger buffer overflows.

The buffer overflow in the implementation of the Smart Call Home function in Cisco NX-OS for Cisco Unified Computing System UCS switches and Nexus devices, as well as in Cisco CG-OS for Cisco Connected Grid series 1000 routers, allows remote SMTP servers to execute arbitrary code using specially...

Huawei HiSuite Arbitrary Installation Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A security vulnerability exists in Huawei HiSuite, which can be exploited by an attacker to install arbitrary applications on a connected phone...

CVE-2016-4811

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors...

CVE-2016-4811

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors...

PT-2016-6155

Name of the Vulnerable Software and Affected Versions NTT Broadband Platform Japan Connected-free Wi-Fi application versions 1.15.1 and earlier for Android NTT Broadband Platform Japan Connected-free Wi-Fi application versions 1.13.0 and earlier for iOS Description The issue allows...

CVE-2016-4811: Improper Access Control

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors...

Connected Cars: The Open Road for Hackers

As vehicles become both increasingly complex and better connected to the Internet, their newfound versatility may be manipulated for malicious purposes. Three of the most concerning potential threats looking ahead to the next few years are those posed by manipulating vehicle operation, ransomware...

WifiChannelMonitor - Monitor APs and Wifi clients on selected channel (Monitor Mode) for Window

WifiChannelMonitor is a utility for Windows that captures wifi traffic on the channel you choose, using Microsoft Network Monitor capture driver in monitor mode, and displays extensive information about access points and the wifi clients connected to them. WifiChannelMonitor also allows you to vi...

NTT Broadband Platform Japan Connected-free Wi-Fi for Android and iOS Arbitrary API Execution Vulnerability

NTT Broadband Platform Japan Connected-free Wi-Fi for Android and iOS is a suite of Android and iOS-based applications from NTT Broadband Platform Japan for finding and automatically connecting to nearby free Wi-Fi in Japan. It is a set of Android and iOS based applications for NTT Broadband...

JVN#46888319: Japan Connected-free Wi-Fi vulnerable to API execution

Japan Connected-free Wi-Fi provided by NTT Broadband Platform, Inc. contains a vulnerability which allows an arbitrary API to be executed by a man-in-the-middle attacker. Impact Android version of this app may allow an arbitrary API to be executed if permissions to execute that API are granted in...

Samsung's SmartThings platform is explosive new vulnerabilities, can trigger the fire alarm-vulnerability warning-the black bar safety net

The researchers found that Samsung's SmartThings platform, there are multiple vulnerabilities for the attacker to invade a victim's home the door open. ! Security research team found in Samsung SmartThings platform in the presence of a plurality of security vulnerability for the network attacker ...