PT-2017-19217 · Sma Solar Technology · Sunny Tripower +3

Name of the Vulnerable Software and Affected Versions: SMA Solar Technology products affected versions not specified Sunny Boy versions TLST-21 and TL-21 Sunny Tripower versions TL-10 and TL-30 Description: An issue was discovered in SMA Solar Technology products where sending nonsense data or...

Man implants microchip in his hands to open doors & unlock car with ease

By Carolina Who Need Keys when We have Human Implantable Technology- British This is a post from HackRead.com Read the original post: Man implants microchip in his hands to open doors unlock car with ease...

File Upload Vulnerability in Longcai MX of Longcai Technology Inc.

Longcai MX is a marketing website that caters to consumer needs and buying desires. A file upload vulnerability exists in Longcai MX, a subsidiary of Longcai Technology, due to the system's failure to strictly filter file contents. An attacker can upload arbitrary files and obtain administrator...

New Bill Seeks Basic IoT Security Standards

Lawmakers in the U.S. Senate today introduced a bill that would set baseline security standards for the government's purchase and use of a broad range of Internet-connected devices, including computers, routers and security cameras. The legislation, which also seeks to remedy some widely-perceive...

Amazon Halts Sale of Android Blu Phone Amid Spyware Concerns

Android phone maker Blu Products was dealt a blow Monday when Amazon said it would no longer sell its phones, citing security and privacy issues. The phone maker came under scrutiny last week by researchers at Kryptowire during a Black Hat session where they criticized the company for collecting...

Beauty Camera App Has Design Logic Flaws

Beauty Camera is a beauty camera with special effects filters under Guangzhou Beauty Information Technology Co. There is a design logic vulnerability in Beauty Camera APP, which can be exploited by attackers to arbitrarily register users and reset passwords...

Universal Password Login Vulnerability in Longcai MX of Longcai Technology Inc.

Longcai MX is a marketing website that caters to consumer needs and buying desires. A universal password login vulnerability exists in the '/manage' page of Longcai MX under Longcai Technology. An attacker can exploit the vulnerability to log into the system backend, view sensitive information or...

SQL Injection Vulnerability in 'cate' Parameter of Aicheng Technology Website Building System

Chengdu Aicheng Technology Co., Ltd. is a collection of website planning, web design, website construction, network promotion seo keyword optimization, network integrated marketing and other business enterprises. There is a SQL injection vulnerability in the 'cate' parameter of the Aicheng...

Shorting-For-Profit Viable Business Model For Security Community

LAS VEGAS–Justine Bone shook up the security research community last year when she decided to do the unconventional. The CEO of MedSec Holdings teamed with hedge fund company Muddy Waters Capital to short the stock of St. Jude Medical in order to profit from research that revealed life-threatenin...

“Breaking Bad Security” – Tutorial 1 – Email Phishing

Welcome to the first tutorial from our new video series, “Breaking Bad Security!” This security series is designed to inform you about different tests, tricks, and free tools you can use to validate your security controls and ensure your environment is secure. In this series, we will provide...

July 26, 2017 – Morning Cyber Coffee Headlines – “Wright Brothers” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 26, 2017 - Headlines Carbon Black in the News: Security expert shares tips...

The Inner Workings of Fake News

The moniker of fake news has been utilized in numerous circles recently, including within government, press and cybersecurity, but this concept actually dates back far beyond the past year. Intentionally misleading propaganda materials have been a linchpin of communication for years, particularly...

32M Becomes First-Ever Company to Implant Micro-Chips in Employees

Biohacking could be a next big thing in this smart world. Over two years ago, a hacker implanted a small NFC chip in his left hand right between his thumb and his pointer finger and hacked Android smartphones and bypassed almost all security measures, demonstrating the risks of Biohacking. At the...

Upcoming Video Series – “Breaking Bad Security” – Series Introduction

Welcome to another new video series, “Breaking Bad Security!” This security series is designed to teach you about different tests, tricks and free tools you can use to validate your security controls to ensure your environment is secure. In this series, we will provide easy-to-follow tutorials th...

Tor Project Opens Bounty Program To All Researchers

The Tor Project announced today the launch of a public bug bounty program to encourage security researchers to privately report issues they find in the group’s software. Unlike its previous invite-only bounty program launched last year, this bounty program will be open to all bounty hunters throu...

Oracle Outside In Technology Remote Vulnerability (CNVD-2017-24347)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

Superior and safe user experiences with the Akamai Cloud Delivery Platform

Your customers are unique and they all expect fast, secure, personalized digital experiences. They are spread across the world, in regions of varying network connectivity, utilize a plethora of devices and screen sizes - making it challenging to deliver your experiences. By delivering 95 Exabytes...

Australia Considering New Law Weakening Encryption

News from Australia: Under the law, internet companies would have the same obligations telephone companies do to help law enforcement agencies, Prime Minister Malcolm Turnbull said. Law enforcement agencies would need warrants to access the communications. "We've got a real problem in that the la...

Thieves Used Infrared to Pull Data from ATM ‘Insert Skimmers’

A greater number of ATM skimming incidents now involve so-called "insert skimmers," wafer-thin fraud devices made to fit snugly and invisibly inside a cash machine’s card acceptance slot. New evidence suggests that at least some of these insert skimmers -- which record card data and store it on a...

Iceni Infix PDF Parsing SetSize Code Execution Vulnerability

Iceni Technlology Infix is a PDF format document editing tool from the British company Iceni Technlology. The tool has text editing, spell checking, find and replace and other functions. A security vulnerability exists in the PDF parsing feature of Iceni Technlology Infix version 7.1.5. The...