Threat Outbreak Alert RuleID28785: Email Messages Distributing Malicious Software on April 17, 2017

Medium Alert ID: 53485 First Published: 2017 April 17 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28785 may contain the following files: Name | Si...

Secure Messaging App 'Confide' Used by White House Staffers Found Vulnerable

The secure messaging app used by staffers in the White House and on Capitol Hill is not as secure as the company claims. Confide, the secure messaging app reportedly employed by President Donald Trump's aides to speak to each other in secret, promises "military-grade end-to-end encryption" to its...

Bill Calls for Study of Cybersecurity Standards for Cars

A House bill was introduced Tuesday that could accelerate the federal government’s involvement in regulating automobile cybersecurity. The Security and Privacy in Your Car Study Act of 2017, authored by Reps. Ted Lieu D-Calif. and Joe Wilson R-SC, calls on the National Highway Traffic Safety...

New Call to Regulate IoT Security By Design

A Washington, D.C. think tank whose mission is critical infrastructure security has joined the call for lawmakers to consider regulating the security of connected devices. In a report published this week, the Institute for Critical Infrastructure Technology pinned the blame for a rash of Mirai...

On PoisonTap, Internet of Things Regulation, and Ransomware

Mike Mimoso and Chris Brook discuss the news of the week, including this week’s House hearing on the Internet of Things, Samy Kamkar’s PoisonTap tool, and Windows 10’s ransomware protections. Show notes: Regulation May Be Best Answer to IoT Insecurity PoisonTap Steals Cookies, Drops Backdoors on...

budget2017.whitehouse.gov XSS vulnerability

Vulnerable URL: https://budget2017.whitehouse.gov/embed/barchart?branchtype=opexentity=null=2017entity=org1field=total=desc=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

CVE-2016-3060

Payments Director in IBM Financial Transaction Manager FTM for ACH Services, Check Services, and Corporate Payment Services CPS 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

Snowden Slammed by House Committee Report

Edward Snowden’s hopes of a presidential pardon were dimmed Thursday when a House Committee report slammed the former U.S. defense contractor saying he has done “tremendous damage” to United States national security. That conclusion was part of a 36-page report PDF released Thursday by the House...

White House Hires First Federal CISO

The White House announced yesterday it has hired retired Brigadier General Gregory J. Touhill, right, to serve as the first federal chief information security officer. Touhill will be responsible for setting policies, strategies and practices across federal agencies. According to a White House bl...

IBM Financial Transaction Manager for ACH Cross-Site Scripting Vulnerability

IBM Financial Transaction Manager FTM for ACH Services is a Financial Transaction Manager product from IBM USA, which is used to monitor, track and report on financial payments and transactions. A cross-site scripting vulnerability exists in Financial Transaction Manager FTM for ACH Services...

MIT Researchers Solve the Spectrum Crunch to make Wi-Fi 10 times Faster

While using your cell phone at a massive public event, like a concert, conference, or sporting event, you have probably experienced slow communication, poor performance or slow browsing speeds, as crowds arrive. That's because of ‘Spectrum Crunch’, which means, Interference of WiFi signals with...

house.focus.cn XSS vulnerability

Vulnerable URL:...

Anti-Surveillance Measure Quashed: Orlando Massacre Cited as Reason

The House voted Thursday to block passage of an amendment aimed to rein in U.S. domestic mass surveillance by the NSA and protect strong encryption standards citing Sunday’s Orlando tragedy as reason to fight surveillance reforms. The so-called Massie-Lofgren amendment was considered a key privac...

Meaningful Surveillance Reform Risks Defeat Over US House Rules Change

Civil liberties groups are anxiously waiting to see if an anti-surveillance amendment will be added to a Department of Defense spending bill Tuesday. The so-called Massie-Lofgren amendment would rein in U.S. domestic mass surveillance by the NSA and protect U.S. encryption standards. The amendmen...

Coalfire goes to Washington!

Our CEO Larry Jones visited The White House Thursday morning to join with First Lady Michelle Obama and Dr. Biden in the celebration of the Joining Forces initiatives fifth-year anniversary and announce Coalfires pledge to hire and train veterans and military spouses...

For the First time, FBI discloses a Flaw to Apple, but it's already Patched!

In Brief The Federal Bureau of Investigation FBI made its first disclosure about a software security flaw to Apple under the Vulnerability Equities Process VEP, a White House initiative created in April 2014 for reviewing flaws and deciding which ones should be made public. Unfortunately, the...

Escape Alice House - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Escape Alice House published at the 'play' market has multiple vulnerabilities...

My house - fun for kids - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My house - fun for kids published at the 'play' market has multiple vulnerabilities...

My PlayHome Lite - Doll House - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application My PlayHome Lite - Doll House published at the 'play' market has multiple vulnerabilities...

Fashion House - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Fashion House published at the 'play' market has multiple vulnerabilities...