A study of car sharing apps

The growing popularity of car sharing services has led some experts to predict an end to private car ownership in big cities. The statistics appear to back up this claim: for example, in 2017 Moscow saw the car sharing fleet, the number of active users and the number of trips they made almost...

CVE-2018-12254

router.php in the Harmis Ek rishta aka ek-rishta 2.10 component for Joomla! allows SQL Injection via the PATHINFO to a home/requesteduser/Sent%20interest/ URI...

Social media: A treasure trove of spam and scams

There are two kinds of spam associated with social media. There are spam ads that actually live on social media, and there is spam that comes in your inbox, courtesy of social media. Both thrive by using data from your social media accounts. But how do spammers know how to target you and send you...

Boutique Shops Offering Rewards Points Pop Up on the Dark Web

Cybercriminal interest in stolen data is not solely limited to financial or personally identifiable information. The exploitation of rewards-points programs, especially those associated with travel, is also on the radar screen for the bad guys. To cater to this interest, a series of boutique stor...

Debian DSA-4104-1 : p7zip - security update

'landave' discovered a heap-based buffer overflow vulnerability in the NCompress::NShrink::CDecoder::CodeReal method in p7zip, a 7zr file archiver with high compression ratio. A remote attacker can take advantage of this flaw to cause a denial-of-service or, potentially the execution of arbitrary...

WordPress How-Interest plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress How-Interest plugin. An attacker can exploit this vulnerability ...

Comey testimony generates massive interest, massive traffic

Online viewers of former FBI Director James Comey's live testimony last week generated a massive peak of 2.5 Tbps of live streaming video traffic on the Akamai platform, despite the hearing occurring in the middle of the work week, in the middle of the work day. To put this in perspective, that 2...

Schneier Brings Campaign for IoT Regulation to RSA

SAN FRANCISCO—Bruce Schneier on Tuesday called on technologists to get involved with policy, insisting that as the Internet of things continues to unfold, the knowledge security experts have will become more applicable. Schneier, CTO of IBM Resilient, stressed in a talk here at the RSA Conference...

Apport 2.x (Ubuntu Desktop 12.10 < 16.04) - Local Code Execution Exploit

Exploit for linux platform in category local exploits Both of these issues were reported to the Apport maintainers and a fix was released on 2016-12-14. The CrashDB code injection issue can be tracked with CVE-2016-9949 and the path traversal bug with CVE-2016-9950. An additional problem where...

Interest Calculator Pro - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Interest Calculator Pro published at the 'play' market has multiple vulnerabilities...

CVE-2015-2165

Multiple cross-site scripting XSS vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform MSDP 4.x, 5.x, and 6.x allow remote attackers to inject arbitrary web script or HTML via the 1 portal, 2 fromDate, 3 toDate, 4 fromTime, 5 toTime, 6 kword, 7 uname, 8 pname, 9...

Debian DLA-47-1 : lua5.1 security update

Fix stack overflow in vararg functions. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Threat Outbreak Alert RuleID11571: Email Messages Distributing Malicious Software on September 15, 2014

Medium Alert ID: 35725 First Published: 2014 September 16 12:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11571 may contain the following files: Name ...

Congress Urged to Update ECPA with Email Privacy Protection

A coalition of digital rights groups and electronic privacy advocates are urging both houses of Congress to consider updating the Electronic Privacy Act of 1986 ECPA, which they claim is an archaic law exploited by the government to obtain the contents of emails without first obtaining a probable...

Google Complies with 'Right to be Forgotten'

In compliance with a Court of Justice of the European Union ruling, Google has taken steps toward a program that will allow Europeans to request their name be removed from certain searches. The ruling under the European Data Protection Law provides Europeans with the “right to be forgotten.” In...

Threat Outbreak Alert: Fake Interest Rate Change Notification Email Messages on January 27, 2014

Medium Alert ID: 32584 First Published: 2014 January 27 18:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an interest rate change notice for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Spanish Romantic Interest Contact Email Messages on July 8, 2013

Medium Alert ID: 29972 First Published: 2013 July 8 15:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain an romantic interest contact notification for the recipient. The text in the email message attemp...

Sky News: Hacking was "Responsible Journalism" in Public Interest

In a statement published by The Guardian Thursday, Sky News admitted to twice authorizing a journalist to hack into the email accounts of persons suspected of crimes, defending its actions as “editorially justified.” In the first incident, the broadcaster admitted hacking the e-mail account of Jo...

Yahoo to Implement Do Not Track

Yahoo has decided that it’s now time to start implementing a Do Not Track system across its various Web properties. The company is one of the last large Web content providers to officially commit to using a DNT technology, and Yahoo said that it plans to have the system implemented by early summe...

Key House Hearing on SOPA Bill Set For Today

All eyes will be on Capitol Hill this morning when the House Judiciary Committee holds a key hearing on the controversial Stop Online Piracy Act, which has drawn wide opposition from a variety of groups and companies for its broad language supposedly designed to prevent copyright infringement. Th...