Chinese surveillance chips found in servers used by US technology giants: Report

By Waqas This can be one of one of the largest corporate spying and hardware hacking campaigns ever launched by a nation-state. Bloomberg has revealed in its recently published report that a nation-state has launched a significant supply chain attack. It is believed to be one of the largest...

Chinese Supply Chain Hardware Attack

Bloomberg is reporting about a Chinese espionage operating involving inserting a tiny chip into computer products made in China. I've written about alternate link this threat more generally. Supply-chain security is an insurmountably hard problem. Our IT industry is inexorably international, and...

spotlight.bloomberg.com XSS vulnerability

Open Bug Bounty ID: OBB-636616 Description| Value ---|--- Affected Website:| spotlight.bloomberg.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Akamai CEO Leighton Calls Cybersecurity 'Fantastic Growth Engine'

Akamai CEO and co-founder Tom Leighton discusses the company's cybersecurity and data protection business. He speaks with Caroline Hyde from the Boston Institute of Contemporary Art on Bloomberg Technology. Source: Bloomberg...

bloomberg.com XSS vulnerability

Open Bug Bounty ID: OBB-596704 Description| Value ---|--- Affected Website:| bloomberg.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Apple Plans to Replace Intel Chips in Macs with its Custom Designed CPUs

In a major blow to Intel, Apple is reportedly planning to use its custom-designed ARM chips in Mac computers starting as early as 2020, ultimately replacing the Intel processors running on its desktop and laptop hardware. The company makes its own A-series custom chips for iPhones, iPads and othe...

Article on the DAO Ethereum Hack

This is good...

Bloomberg - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bloomberg published at the 'play' market has multiple vulnerabilities...

FedRAMP in Bloomberg

Recently Bloomberg Government published an article that describes the increasing awareness of the Federal Risk and Authorization Management Program FedRAMP as a major factor affecting the federal marketspace. The article indirectly indicates a major first-mover advantage, as there are "only 77...

bloomberg.com XSS vulnerability

Vulnerable URL: http://www.bloomberg.com/quote/ASD"%3CSVG%3E%3CSCRIPT+XLINK:HREF=DATA:,%26%23X61%3B%26%23X6C%3B%26%23X65%3B%26%23X72%3B%26%23X74%3B%28%27OPENBUGBOUNTY%27%29%20%3E%3C/SCRIPT%3E:MK Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.08.2017 Vulnerability...

Bloomberg for Tablet - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Bloomberg for Tablet published at the 'play' market has multiple vulnerabilities...

Bloomberg Professional - BSD license, Customized SSL, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application Bloomberg Professional published at the 'play' market has multiple vulnerabilities...

bloomberg.com XSS vulnerability

Vulnerable URL: http://www.bloomberg.com/research/common/symbollookup/symbollookup.asp?lookuptype=private=ALL=%3C/title%3E%3Csvg/onload=prompt%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.05.2016 Latest check for patch:| 24.05.2016 01:00 GMT Vulnerability type:| XSS...

bloomberg.com vulnerability

Vulnerable URL: http://www.bloomberg.com/external-link?url=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 326 Google Pagerank| 8 VIP website status:| Yes Check bloomberg.com SSL...

bloomberg.com XSS vulnerability

Vulnerable URL: http://www.bloomberg.com/research/common/symbollookup/symbollookup.asp?lookuptype=private=all"/=A Details: Description| Value ---|--- Patched:| Yes, at 09.09.2016 Latest check for patch:| 09.09.2016 09:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

MIRcon 2014 – Day 1 Highlights

The first day of MIRcon 2014 is officially done and was packed with thought-provoking keynotes, presentations and a one-of-a-kind reception. While there's too much to fit into this blog post, I wanted to provide you with some of the highlights: FireEye's COO, Kevin Mandia kicked-off MIRcon and wa...

NSA denies Report that Agency knew and exploited Heartbleed Vulnerability

The Bloomberg claimed that the U.S. National Security Agency NSA knew about the most critical Heartbleed flaw and has been using it on a regular basis to gather “critical intelligence” and sensitive information for at least past two years and decided to keep the bug secret, citing two sources...

Bloomberg Leaks Private Messages from Data-Mining Project

A news report says the beleaguered Bloomberg financial data and news service accidentally posted online more than 10,000 private messages between traders and clients at some of the world’s largest banks. The breaches, said to be part of a former employee’s data mining project, took place in 2009...

ADAG Group Chairman Anil Ambani's email under phishing attack

ADAG Group Chairman Anil Ambani's email under phishing attack Some Unknown hackers attempted a phishing attack in May on Anil Dhirubhai Ambani Group ADAG Chairman Anil Ambani's email ID. The hacking case is now being investigated by the cyber crime cell of Mumbai police after ADAG officials...

ADAG Group Chairman Anil Ambani's email under phishing attack

ADAG Group ChairmanAnil Ambani 's email under phishing attack Some Unknown hackers attempted a phishing attack in May on Anil Dhirubhai Ambani Group ADAG Chairman Anil Ambani's email ID. The hacking case is now being investigated by the cyber crime cell of Mumbai police after ADAG officials...