Radiant Defense - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Radiant Defense published at the 'play' market has multiple vulnerabilities...

Toy Defense - TD Strategy - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Toy Defense - TD Strategy published at the 'play' market has multiple vulnerabilities...

Defense Zone - Original - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Defense Zone - Original published at the 'play' market has multiple vulnerabilities...

Galaxy Defense (Tower Game) - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Galaxy Defense Tower Game published at the 'play' market has multiple vulnerabilities...

Galaxy War Tower Defense - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Galaxy War Tower Defense published at the 'play' market has multiple vulnerabilities...

Toy Defense 2 — TD Battles - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Toy Defense 2 — TD Battles published at the 'play' market has multiple vulnerabilities...

Castle Defense - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Castle Defense published at the 'play' market has multiple vulnerabilities...

Field Defense: Tower Evolution - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Field Defense: Tower Evolution published at the 'play' market has multiple vulnerabilities...

Zombie Defense - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Zombie Defense published at the 'play' market has multiple vulnerabilities...

Tower Defense® - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Tower Defense® published at the 'play' market has multiple vulnerabilities...

SAMURAI vs ZOMBIES DEFENSE 2 - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application SAMURAI vs ZOMBIES DEFENSE 2 published at the 'play' market has multiple vulnerabilities...

Zombie Defense: Adrenaline - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Zombie Defense: Adrenaline published at the 'play' market has multiple vulnerabilities...

Hack The Pentagon Bug Bounty Opens April 18

The Department of Defense announced today that registration for its Hack the Pentagon bug bounty trial program is open, and that the program will be run on the HackerOne platform. The trial of the government’s first bug bounty program will run April 18 to May 12. The DoD said only certain...

The FBI against the judges command: declined to use the Tor browser vulnerability code-vulnerability warning-the black bar safety net

! Last month, the FBI was ordered disclosure used to attack the dark web child pornography website single visitors single full version malicious code. To make this decision of judge Robert J. Bryan, he expressed his understanding of the FBI what exactly is how to caught the accused is a very fair...

SA119 : Multiple NSS Vulnerabilities

SUMMARY Blue Coat products that include affected versions of NSS are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to trigger arbitrary code execution. The attacker can also cause denial of service through application crashes and memory corruption...

Locky Ransomware Now Part Of Massive Spam Attack

Researchers are tracking a massive spam campaign pelting inboxes with Locky ransomware downloaders in the form of JavaScript attachments. The huge spike, reported by security firm Trustwave, represents an extraordinary uptick in the attempted distribution of the Locky ransomware. Trustwave said...

SA117 : OpenSSL Vulnerabilities 1-Mar-2016

SUMMARY Blue Coat products using affected versions of OpenSSL are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to decrypt live and recorded SSL sessions, cause denial of service through application crashes, and possibly execute arbitrary code. A...

Judge Confirms CMU Paid to Break Tor

A U.S. district court judge has confirmed what has probably been the worst-kept secret in security, that Carnegie Mellon University’s Software Engineering Institute was indeed contracted by the Department of Defense to study how to break Tor anonymity. A motion to compel discovery filed by Brian...

Judge Confirms Government Paid CMU Scientists to Hack Tor Users for FBI

Everything is now crystal clear: The security researchers from Carnegie Mellon University CMU were hired by the federal officials to discover a technique that could help the FBI Unmask Tor users and Reveal their IP addresses as part of a criminal investigation. Yes, a federal judge in Washington...

SA111 : OpenSSL Vulnerabilities 28-Jan-2016

SUMMARY Blue Coat products using affected versions of OpenSSL 1.0.2, 1.0.1, and 0.9.8 are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to obtain ephemeral Diffie-Hellman DHE private key information and perform man-in-the-middle attacks on SSL/TLS...