New Coalition Launches Fight Against Patriot Act Section 215

A broad group of civil-rights, technology and political groups from across the spectrum has developed a new initiative to advocate for the repeal of Section 215 of the USA PATRIOT Act, the part that provides the authority for the bulk collection of phone metadata and other information. The new...

Your Location has been Shared 5,398 Times in Last 14 Days

Do you realize how often your smartphone is sharing your location data with various companies? It is more than 5000 times in just two weeks. That is little Shocking but True! A recent study by the security researchers from Carnegie Mellon reveals that a number of smartphone applications collect...

[SECURITY] Fedora 21 Update: mongodb-2.4.13-1.fc21

Mongo from "humongous" is a high-performance, open source, schema-free document-oriented database. MongoDB is written in C++ and offers the follow ing features: Collection oriented storage: easy storage of object/JSON-style data Dynamic queries Full index support, including on inner objects and...

Debian DLA-20-1 : munin security update

Christoph Biedl - munin-node: more secure state file handling, introducing a new plugin state directory root, owned by uid 0. Then each plugin runs in its own UID plugin state directory, owned by that UID. Closes: 684075, Closes: 679897, closes CVE-2012-3512. - plugins: use runtime...

Tech Companies, Privacy Advocates Call for NSA Reform

A group of technology companies, non-profits and privacy and human rights organizations have sent a letter to President Barack Obama, the director of national intelligence and a wide range of Congressional leaders, calling for an end to the bulk collection of phone metadata under Section 215 of t...

[SECURITY] Fedora 22 Update: mongodb-2.6.8-1.fc22

Mongo from "humongous" is a high-performance, open source, schema-free document-oriented database. MongoDB is written in C++ and offers the follow ing features: Collection oriented storage: easy storage of object/JSON-style data Dynamic queries Full index support, including on inner objects and...

Difference Between Typical and Advanced Scalability Modes

Challenge Understanding the difference between Typical and Advanced scalability modes. Cause Depending on the size of the managed virtual environment, you can choose of the following Veeam ONE installation types: Typical -- this type of installation is recommended for small to medium environments...

Masscan Port Scanner

Masscan is a port scanning product. Use of this product might indicate an attempt to collect data regarding the target network, and use it for future attacks...

[SECURITY] Fedora 21 Update: tcllib-1.16-5.fc21

Tcllib, the Tcl Standard Library is a collection of Tcl packages that provide utility functions useful to a large collection of Tcl programmers...

Apple Admits Siri Voice Data is Being shared with Third Parties

It has been known from year 2013 that commands we have been whispering to Siri are being stored on Apple servers for up to two years for analysis, but this news might be the most shocking development yet. Apple admits that its Siri — an intelligent personal assistant for iPhone, iPad and iPod Tou...

Linux Kernel Associative Array Garbage Collection - Crash PoC

Exploit for linux platform in category dos / poc / ---------------------------------------------------------------------------------------------------- cve-2014-3631poc.c The assocarraygc function in the associative-array implementation in lib/assocarray.c in the Linux kernel before 3.16.3 does n...

Linux Kernel 3.16.3 - Associative Array Garbage Collection Crash (PoC)

Linux Kernel 3.16.3 - Associative Array Garbage Collection Crash PoC / ---------------------------------------------------------------------------------------------------- cve-2014-3631poc.c The assocarraygc function in the associative-array implementation in lib/assocarray.c in the Linux kernel...

Linux Kernel 3.16.3 - Associative Array Garbage Collection Crash (PoC)

/ ---------------------------------------------------------------------------------------------------- cve-2014-3631poc.c The assocarraygc function in the associative-array implementation in lib/assocarray.c in the Linux kernel before 3.16.3 does not properly implement garbage collection, which...

NSA Rogers: We Need Frameworks for Cyber, Circumventing Crypto

WASHINGTON, D.C.—In a conference-facing discussion with CNN’s Jim Sciutto this morning, NSA director and commander of U.S. Cyber Command, Mike Rogers, said legislators need to create a legal framework outside the NSA and FBI’s control that would establish norms of behavior for law enforcement and...

Chef Web UI Brute Force Utility

This module attempts to login to Chef Web UI server instance using username and password combinations indicated by the USERFILE, PASSFILE, and USERPASSFILE options. It will also test for the default login admin:p@ssw0rd1. This module requires Metasploit: https://metasploit.com/download Current...

[SECURITY] Fedora 21 Update: virt-who-0.8-11.fc21

Agent that collects information about virtual guests present in the system and report them to the subscription manager...

Markey Car Security Report Just the Start for Automakers

This may come as a surprise to one of you, but it turns out that computers and, by extension, things that contain computers, are vulnerable to attackers. That includes cars, something that the United States government has now discovered, and Sen. Edward Markey is now warning consumers that...

Graylog2 Default Credentials

The remote host is running Graylog2, a log collection and analysis system, which is using a known set of default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid81260; scriptversion"1.3";...

Samsung Admits Its Smart TV Is Spying On You

Is Your Smart TV Spying On You? You just need to make sure you don't hold any private conversations in front of the internet-connected TV. IS SMART TV GETTING TOO SMART? Smart TVs are connected to the Internet, and they are capable of collecting and transmitting our data. Samsung's Smart TV uses...

LabTech Database Backup Tasks Run Too Long

Challenge With Veeam Plug-in for LabTech, the database backup tasks run for an extended period of time. Cause This happens due to the growth of pluginveeambrsystemlog table. Solution The issue should be fixed in later releases. In the meantime, a workaround is available. Download the fix here...