Row Hammer Privilege Escalation - Lenovo Support US

No description provided...

Robert Flores Named Vice President of IT

Coalfire welcomes Robert Flores as the newest addition to the cybersecurity risk management and compliance service leaders leadership team as its Vice President of Information Technology. Flores has a proven track record of driving strategy for high-growth IT companies while managing billion-doll...

Attackers with physical access to Lenovo RackSwitches may be able to upload unsigned firmware - Lenovo Support US

No description provided...

SMRAM data may be viewed on ThinkPad systems - Lenovo Support US

No description provided...

Lenovo Fingerprint Manager and Lenovo Touch Fingerprint Software Privilege Escalation - Lenovo Support US

No description provided...

Lenovo Accelerator Application Vulnerability

Lenovo has issued a security advisory to address a vulnerability in the Accelerator Application software. Products affected by this vulnerability include the Lenovo notebook and desktop systems preloaded with the Windows 10 operating system. Exploitation of this vulnerability may allow a remote...

Spotify ArtistExplorer BB #1 - Cross Site Script Vulnerability

Document Title: =============== Spotify ArtistExplorer BB 1 - Cross Site Script Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1662 Release Date: ============= 2016-04-17 Vulnerability Laboratory ID VL-ID:...

Build a Town: Dream strategy - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Build a Town: Dream strategy published at the 'play' market has multiple vulnerabilities...

Bun Wars - Free Strategy Game - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Bun Wars - Free Strategy Game published at the 'play' market has multiple vulnerabilities...

WarLight, Risk & Strategy - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application WarLight, Risk & Strategy published at the 'play' market has multiple vulnerabilities...

Space Dominion online strategy - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Space Dominion online strategy published at the 'play' market has multiple vulnerabilities...

Greed for Glory: War Strategy - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Greed for Glory: War Strategy published at the 'play' market has multiple vulnerabilities...

Lords & Knights - Strategy MMO - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Lords & Knights - Strategy MMO published at the 'play' market has multiple vulnerabilities...

Toy Defense - TD Strategy - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Toy Defense - TD Strategy published at the 'play' market has multiple vulnerabilities...

Grepolis - Divine Strategy MMO - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Grepolis - Divine Strategy MMO published at the 'play' market has multiple vulnerabilities...

Chess Strategy (1800-2400) - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Chess Strategy 1800-2400 published at the 'play' market has multiple vulnerabilities...

Locky Ransomware Now Part Of Massive Spam Attack

Researchers are tracking a massive spam campaign pelting inboxes with Locky ransomware downloaders in the form of JavaScript attachments. The huge spike, reported by security firm Trustwave, represents an extraordinary uptick in the attempted distribution of the Locky ransomware. Trustwave said...

File upload vulnerability example analysis-vulnerability warning-the black bar safety net

Principles File upload is a Web application that often appear in the function,it allows users to upload files to the server and saved to a specific location. This security is a very sensitive issue, once the malicious program is uploaded to the server and get the Execute permission, the...

Facebook Offering You $1000 to Run Advertisement Against Terrorism

Over a past few times, we have seen a steady growth in the online recruitment of Jihadis from social networking sites by many radical groups. ISIS has topped the online recruitment, and it is the only terror group that leverages the enormous power of Twitter and Facebook to radicalize young minds...

2014-2015 Professional Reading Round-Up

At an earlier point in my career, I used to read a lot of technical security books. From 2006 to 2012 I published a series of Best Book Bejtlich Read posts. Beginning in 2013 I became much more interested in military-derived strategy and history, dating back to my studies at the Air Force Academy...