1694 matches found
Lawmakers Reintroduce Popular Email Privacy Act
A group of bipartisan lawmakers reintroduced the Email Privacy Act, a bill that would require law enforcement to get a warrant before searching email, Facebook messages and files stored on cloud services no matter how old the archives. The Email Privacy Act is an attempt to reform the decade-old...
Siemens APOGEE Insight Incorrect File Permissions Vulnerability (Update A)
OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-16-082-01 Siemens APOGEE Insight Incorrect File Permissions Vulnerability that was published March 22, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 3 -------- Siemens has identified an...
FTC Releases Alert on Fake Apps for Mobile Devices
The Federal Trade Commission FTC has released an alert on fraudulent mobile apps designed to exploit consumers. Some fake apps may steal personal information such as credit card numbers. By taking precautions, users can protect themselves and their private data. US-CERT encourages users and...
UBUNTU-CVE-2016-0736
In Apache HTTP Server versions 2.4.0 to 2.4.23, modsessioncrypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation AES256-CBC by default, hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle...
NYU Students Apply Blockchain Solution to Electronic Voting Security
The contentious U.S. presidential election elevated a number of critical security issues to the forefront, perhaps none more important for the long-term than questions of voter fraud and electronic voting security. If voting is ever to move away from paper ballots, the integrity of the process mu...
Tesla Motors Gateway ECU Command Injection Vulnerability
The Tesla Motors Gateway ECU is a set of firmware used to manage the car and provide driving functions. A security vulnerability in the Tesla Motors Gateway ECU firmware handling updates allows remote attackers to exploit the vulnerability to submit malicious updates that inject arbitrary command...
SQL Injection Vulnerability in Department Parameters of Guangzhou Zhongda Kaixuan Electronic Technology Co.
Guangzhou Zhongda Kaixuan Electronic Technology Co., Ltd. online office hall is a comprehensive e-government service platform integrating social management, public service, information disclosure and efficiency supervision. There is a SQL injection vulnerability in the department parameter of the...
Hundreds Of Operations Canceled After Malware Hacks Hospitals Systems
Computer viruses do not discriminate. They are not just hacking your email and online banking accounts anymore. Computer viruses do not distinguish between a personal computer or a hospital machine delivering therapy to patients — and the results could prove deadly. Cyber attacks on hospitals hav...
Google spreadsheet CSRF+JSON hijacking vulnerabilities-vulnerability warning-the black bar safety net
In 2 0 1 5 years 1 0 months I am in the Google spreadsheet for the API interface found in the JSON + CSRF（cross-site forgery requests, Clickjacking vulnerability. An attacker can exploit this vulnerability in not authorized to access Google Drive files of the case, to obtain the user of the...
EFF: NSA's Support of Encryption 'Disingenuous'
CAMBRIDGE, Ma.—The National Security Agency came out in support of encryption again Wednesday, but privacy advocates were quick to contest the agency’s stance, criticizing it for having a different definition of the term than others. Glenn Gerstell, general counsel for the NSA, stressed that the...
Yahoo Slams Email Surveillance Story: Experts Demand Details
Bombshell revelations that Yahoo conducted mass email surveillance is raising hackles among legal, civil liberties and security experts that demand Yahoo and the U.S. government come clean. Meanwhile Yahoo challenged the accuracy of Tuesday’s report by Reuters. “The article is misleading. We...
37-Year-Old 'Syrian Electronic Army' Hacker Pleads Guilty in US court
One of the FBI's Most Wanted Hackers who was arrested in Germany earlier this year has pleaded guilty to federal charges for his role in a scheme that hacked computers and targeted the US government, foreign governments, and multiple US media outlets. Peter Romar, 37, pleaded guilty Wednesday in ...
Threat Outbreak Alert RuleID25252: Email Messages Distributing Malicious Software on September 27, 2016
Medium Alert ID: 49058 First Published: 2016 September 28 12:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25252 may contain the following files: Name ...
SQL Injection Vulnerability in the id Parameter of Nanchangwei.com Electronic Newspaper System
"VNN Digital Newspaper" is a professional software product for digitizing newspapers, which can provide a perfect solution for paper newspapers to go online. It allows the original newspaper layout to be quickly and easily presented to readers through the Internet. There exists a SQL injection...
FTC Releases Alert on Securing Personal Information When Using Rental Vehicles
The Federal Trade Commission FTC has released recommendations for consumers to protect their personal data when using rental vehicles. Rental vehicles may contain infotainment systems that can connect with personal devices to stream music, allow hands-free calls and texts, or guide navigation...
SQL Injection Vulnerability in the Electronic Newspaper System of Nanchang Vnet Digital Media Co.
Vnet Digital Newspaper" is a professional software product for digitizing newspapers, which can provide a perfect solution for paper newspapers to go online. It allows the original newspaper layout to be quickly and easily presented to readers through the Internet. The product suffers from SQL...
SQL Injection Vulnerability in the id Parameter of Nanchangwei.com Electronic Newspaper System
Vnet Digital Newspaper" is a professional software product to digitize newspapers, which can provide a perfect solution for paper newspapers to go online. A SQL injection vulnerability exists in the id parameter of Nanchang WiNET Digital Newspaper System. An attacker can exploit the vulnerability...
EFF Blasts Microsoft Over Windows 10 Rollout
The Electronic Frontier Foundation is blasting Microsoft for its “malicious” and “annoying” tactics when it comes to prodding Windows users to update their operating system to Windows 10. The digital watchdog group says Microsoft’s strategy of pushing the Windows 10 upgrade application onto users...
Cybersecurity Tips for the Rio Olympics
As the 2016 Olympic Games begin in Rio de Janeiro, US-CERT reminds travelers to be aware of cybersecurity risks. At high-profile events, hacktivists may take advantage of the large audience to spread their message. Cyber criminals may attempt to steal personally identifiable information or harves...
