KasperskyOS — Secure Operating System released for IoT and Embedded Systems

Russian cyber security and antivirus vendor Kaspersky Lab has made available the much awaited KasperskyOS, a secure-by-design operating system based on Microkernel architecture which is specially designed for network devices, industrial control systems and the Internet of Things. The operating...

Malware Information Sharing Platform: MISP

Malware Information Sharing Platform MISP, Malware Information Sharing Platform and Threat Sharing, is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threat about cyber security incidents analysis and malware analysis. MISP is...

Cloud-AI: Artificially Intelligent System Found 10 Security Bugs in LinkedIn

2017 is the year of Artificial Intelligence A.I., Big Data, Virtual Reality VR and Cyber Security with major companies like Google, Facebook, Apple, IBM and Salesforce and technology pioneers like SpaceX founder Elon Musk investing in these hot technologies. Since everyone seems to be talking abo...

Data Privacy Day Events

As Data Privacy Day DPD approaches, US-CERT recommends that users and businesses learn more about how to protect their privacy and personal information. DPD is celebrated every January 28 and is an international effort to promote the importance of data privacy. DPD is sponsored by the National...

CVE-2018-14670

Incorrect configuration in deb package could lead to the unauthorized use of the database. the UK’s National Cyber Security Centre NCSC...

Threat Outbreak Alert RuleID27112: Email Messages Distributing Malicious Software on January 6, 2017

Medium Alert ID: 52265 First Published: 2017 January 6 15:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27112 may contain the following files: Name |...

This Ransomware Unlocks Your Files For Free If You Read CyberSecurity Articles

Ransomware has been around for a few years, but in last two years, it has become one of the fastest growing threats to businesses and users across the world, so will be in 2017. Ransomware is a piece of malware that encrypts files on your computer with strong encryption algorithms and then demand...

Siemens APOGEE Insight Incorrect File Permissions Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-082-01 Siemens APOGEE Insight Incorrect File Permissions Vulnerability that was published March 22, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 3 -------- Siemens has identified an...

Exploit Development IDE: Exploit Pack

Exploit Development IDE Exploit Pack is a full IDE for exploit development and penetration testing with base workspace and an extensible module system. It is written mostly in JAVA but its modules use Python as an engine and it can be used to develop packages or tools which then can be run inside...

On Yahoo's One Billion Breach, a DDoS-For-Hire Crackdown and More

Mike Mimoso and Chris Brook discuss the news of the week including Yahoo’s latest breach announcement, a DDoS-for-hire crackdown, hackers seeking help with Mirai, and some new Adobe patches. Show notes: Yahoo Discloses Data From 1 Billion Accounts Stolen in 2013 Beta Firmware Updates Available fo...

IBM Opens Attack Simulation Test Center

CAMBRIDGE, Ma. – IBM cut the ribbon on its new global security headquarters Wednesday that will also serve as command center for its just announced X-Force Incident Response and Intelligence Services. The centerpiece of the new 153,000-sqft facility is the company’s Cyber Range which IBM bills as...

FireEye Cyber Defense Summit 2016: The Incident Response Track – Technical Details and Solutions that Work

2016 has been a year of significant change to the cyber security landscape. The rapid proliferation of ransomware and the emergence of Internet of Things mass compromise has changed the landscape for responders. Similarly, existing threats have become more brazen, with nation-state actors...

Teach you how to use the exploit to ROOT an Android phone-bug warning-the black bar safety net

As mobile the rapid development of Internet, smart phones, tablet PCs and other intelligent terminal equipment gradually popular, and slowly integrated into our lives. However at the same time the smartphone security issues are also increasingly prominent, the mobile payment vulnerabilities, mobi...

Threat Outbreak Alert RuleID25811: Email Messages Distributing Malicious Software on November 8, 2016

Medium Alert ID: 49612 First Published: 2016 November 8 15:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25811 may contain the following files: Name |...

China Passes Cybersecurity Law to Tighten its Control over the Internet

China has long been known for its strict censorship policies, which has already made it difficult for foreign companies to do business in the world's most populous country of more than 1.35 Billion people. Now, the Chinese government has approved a broad new controversial cybersecurity regulation...

Websites of Indian Embassy in 7 Countries Hacked; Database Leaked Online

Indian embassy websites in seven different countries have been hacked, and attackers have leaked personal data, including full name, residential address, email address, passport number and phone number, of Indian citizens living abroad. This incident is extremely worrying because it involves...

Cisco AsyncOS for Email and Web Security Appliances Remote Security Bypass Vulnerability

Cisco AsyncOS for Email and Web Security Appliances are both products of Cisco, Inc.Cisco AsyncOS for Email Security Appliances is a set of operating systems used in the Email Security Appliance ESA of Cisco, Inc.Cisco Web Security Appliance WSA is a set of Web security appliances. Cisco AsyncOS...

GNU tar 1.29 Extract Pathname Bypass

---------------- t2'16 special vulnerability release ----------------- Vulnerability: POINTYFEATHER aka Tar extract pathname bypass Credits: Harry Sintonen / FSC1V Cyber Security Services Date: 2016-10-27 Impact: File overwrite in certain situations Classifier: Full spectrum cyber CVSS: 4.3.2...

Major Security Vulnerability Found In Schneider Electric ICS Gear

Schneider Electric is grappling with a critical vulnerability found in its flagship industrial controller management software called Unity Pro that allows hackers to remotely execute code on industrial networks. The warning comes from Indegy, an industrial cybersecurity firm. Indegy discovered th...

The Hacker News launches Online Deals Store – Get Best Deals & Offers

Hey readers, guess what? The Hacker News THN is about to complete its 6 years as a leading Information Security Channel – attracting over 9 Million readers worldwide – and a trusted source for Hacking, Cyber Security and Infosec News for the enthusiasts, technologists & nerds. In the special...