Legislation Proposed to Secure Connected IoT Devices

A Senate bill introduced today would prioritize security in connected devices, requiring providers who sell to the U.S. government to implement measures that would have been an impediment to the IoT botnet-fueled attacks against DNS provider Dyn and webhost OVH. The Internet of Things Cybersecuri...

My Airtel-Recharge, Bill, Bank - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Airtel-Recharge, Bill, Bank published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID29417: Email Messages Distributing Malicious Software on June 7, 2017

Medium Alert ID: 54132 First Published: 2017 June 7 13:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29417 may contain the following files: Name | Size...

congress.gov XSS vulnerability

Vulnerable URL: https://www.congress.gov/bill/114th-congress/senate-bill/3542/cosponsors?q="search":"S.+3542"=1"/Style=position:fixed;top:0;left:0;font-size:999px;/Onmouseenter=confirmOPENBUGBOUNTY//"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY //...

Hack Department of Homeland Security Act Would Bring Bug Bounty Program to DHS

Hackers will soon be able to poke holes in networks and systems belonging to the Department of Homeland Security if four senators get their way and a bill is passed that would institute a DHS bug bounty similar to programs recently implemented for the Army, Air Force and Pentagon. The bill, known...

Revised Active Defense Bill Allows Victims to Recover or Destroy Stolen Data

A controversial bill that would allow organizations that have been breached to hack back has undergone revisions that include an exemption permitting victims to recover or destroy their data on an attacker’s infrastructure. Rep. Tom Graves R-GA introduced the updated Active Cyber Defense Certaint...

Bill Calls for Study of Cybersecurity Standards for Cars

A House bill was introduced Tuesday that could accelerate the federal government’s involvement in regulating automobile cybersecurity. The Security and Privacy in Your Car Study Act of 2017, authored by Reps. Ted Lieu D-Calif. and Joe Wilson R-SC, calls on the National Highway Traffic Safety...

Russia proposes 10 Year in Prison Sentence for Hackers and Malware Authors

The Russian government has introduced a draft bill that proposes prison sentences as punishment for hackers and cyber criminals creating malicious software used in targeting critical Russian infrastructure, even if they have no part in actual cyber attacks. The bill, published on the Russian...

Threat Outbreak Alert RuleID26529: Email Messages Distributing Malicious Software on November 23, 2016

Medium Alert ID: 49863 First Published: 2016 November 23 17:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26529 may contain the following files: Name |...

The new .LNK between spam and Locky infection

Just when it seems the Ransom:Win32/Locky activity has slowed down, our continuous monitoring of the ransomware family reveals a new workaround that the authors might be using to keep it going. The decline in Locky activity can be attributed to the slowdown of detections of Nemucod, which Locky...

Facebook Fixes Vulnerability That Led to Account Takeover, Pays Researcher $16K

Facebook quickly resolved a vulnerability in its Business Manager tool late last month that could have let an attacker take over any Facebook page. Arun Sureshkumar, a security researcher in India, disclosed the vulnerability Aug. 29; a member of Facebook’s security team, Neal Poole, informed him...

CVE-2016-3554

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to PC / BOM, MCAD, and Design...

Anti-Encryption Bill Released, would Kill your Privacy and Security

The United States anti-encryption bill will kill your Privacy. In the wake of the Apple vs. FBI case, two leading Intelligence Committee Senators have introduced an anti-encryption bill that would effectively ban strong encryption. Senators Richard Burr R-NC and Dianne Feinstein D-CA released the...

Just One Device? No, Government wants Apple to Unlock 12 More iPhones

Until now, the FBI is asking for Apple's help in unlocking the iPhone belonging to one of the terrorists in the San Bernardino shootings that killed 14 and injured 24 in December. However, in addition to iPhone 5C belonged to San Bernardino shooter Syed Farook, the U.S. Justice Department is...

Threat Outbreak Alert RuleID20958: Email Messages Distributing Malicious Software on February 5, 2016

Medium Alert ID: 43433 First Published: 2016 February 5 15:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20958 may contain the following files: Name |...

Microsoft will Inform You If Government is Spying on You

Following in the footsteps of Twitter, Facebook and Google, Microsoft promises to notify users of its e-mail Outlook and cloud storage OneDrive services if government hackers may have targeted their accounts. The company already notifies users if an unauthorized person tries to access their Outlo...

Threat Outbreak Alert RuleID20270: Email Messages Distributing Malicious Software on December 24, 2015

Medium Alert ID: 42858 First Published: 2015 December 24 15:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20270 may contain the following files: Name |...

Government Could Hack Children's Toys to Spy on You

Smartphones, Smart TVs, Smart Watches, Cell Phone Towers, Messaging services… but now, What's Next? Smart Toys? Yes, probably. Tech expert is warning that 'Smart Toys' could now be used by the government intelligence agencies to spy on suspects. As part of the Investigatory Powers Bill, children'...

Threat Outbreak Alert RuleID19414: Email Messages Distributing Malicious Software on November 16, 2015

Medium Alert ID: 42105 First Published: 2015 November 16 16:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19414 may contain the following files: Name |...

Threat Outbreak Alert RuleID17159: Email Messages Distributing Malicious Software on February 22, 2016

Medium Alert ID: 40352 First Published: 2015 August 10 14:24 GMT Last Updated: 2016 February 22 20:36 GMT Version: 8 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17159...