Debian DSA-4104-1 : p7zip - security update

'landave' discovered a heap-based buffer overflow vulnerability in the NCompress::NShrink::CDecoder::CodeReal method in p7zip, a 7zr file archiver with high compression ratio. A remote attacker can take advantage of this flaw to cause a denial-of-service or, potentially the execution of arbitrary...

WordPress How-Interest plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress How-Interest plugin. An attacker can exploit this vulnerability ...

Comey testimony generates massive interest, massive traffic

Online viewers of former FBI Director James Comey's live testimony last week generated a massive peak of 2.5 Tbps of live streaming video traffic on the Akamai platform, despite the hearing occurring in the middle of the work week, in the middle of the work day. To put this in perspective, that 2...

Schneier Brings Campaign for IoT Regulation to RSA

SAN FRANCISCO—Bruce Schneier on Tuesday called on technologists to get involved with policy, insisting that as the Internet of things continues to unfold, the knowledge security experts have will become more applicable. Schneier, CTO of IBM Resilient, stressed in a talk here at the RSA Conference...

Apport 2.x (Ubuntu Desktop 12.10 < 16.04) - Local Code Execution Exploit

Exploit for linux platform in category local exploits Both of these issues were reported to the Apport maintainers and a fix was released on 2016-12-14. The CrashDB code injection issue can be tracked with CVE-2016-9949 and the path traversal bug with CVE-2016-9950. An additional problem where...

Interest Calculator Pro - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Interest Calculator Pro published at the 'play' market has multiple vulnerabilities...

CVE-2015-2165

Multiple cross-site scripting XSS vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform MSDP 4.x, 5.x, and 6.x allow remote attackers to inject arbitrary web script or HTML via the 1 portal, 2 fromDate, 3 toDate, 4 fromTime, 5 toTime, 6 kword, 7 uname, 8 pname, 9...

Debian DLA-47-1 : lua5.1 security update

Fix stack overflow in vararg functions. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Threat Outbreak Alert RuleID11571: Email Messages Distributing Malicious Software on September 15, 2014

Medium Alert ID: 35725 First Published: 2014 September 16 12:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11571 may contain the following files: Name ...

Congress Urged to Update ECPA with Email Privacy Protection

A coalition of digital rights groups and electronic privacy advocates are urging both houses of Congress to consider updating the Electronic Privacy Act of 1986 ECPA, which they claim is an archaic law exploited by the government to obtain the contents of emails without first obtaining a probable...

Google Complies with 'Right to be Forgotten'

In compliance with a Court of Justice of the European Union ruling, Google has taken steps toward a program that will allow Europeans to request their name be removed from certain searches. The ruling under the European Data Protection Law provides Europeans with the “right to be forgotten.” In...

Threat Outbreak Alert: Fake Interest Rate Change Notification Email Messages on January 27, 2014

Medium Alert ID: 32584 First Published: 2014 January 27 18:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an interest rate change notice for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Spanish Romantic Interest Contact Email Messages on July 8, 2013

Medium Alert ID: 29972 First Published: 2013 July 8 15:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain an romantic interest contact notification for the recipient. The text in the email message attemp...

Sky News: Hacking was "Responsible Journalism" in Public Interest

In a statement published by The Guardian Thursday, Sky News admitted to twice authorizing a journalist to hack into the email accounts of persons suspected of crimes, defending its actions as “editorially justified.” In the first incident, the broadcaster admitted hacking the e-mail account of Jo...

Yahoo to Implement Do Not Track

Yahoo has decided that it’s now time to start implementing a Do Not Track system across its various Web properties. The company is one of the last large Web content providers to officially commit to using a DNT technology, and Yahoo said that it plans to have the system implemented by early summe...

Key House Hearing on SOPA Bill Set For Today

All eyes will be on Capitol Hill this morning when the House Judiciary Committee holds a key hearing on the controversial Stop Online Piracy Act, which has drawn wide opposition from a variety of groups and companies for its broad language supposedly designed to prevent copyright infringement. Th...

Researchers Find Browser History-Sniffing Still Ongoing

The practice of history sniffing, which has been seen as out-of-bounds and a serious privacy violation for the better part of a decade now, is still ongoing by some ad networks, researchers have found. A study completed recently by researchers at Stanford University’s Center for Internet and...

Domains Using .Org to Have Tighter Security

The Public Interest Registry will add an extra layer of security known as DNS Security Extensions DNSSEC to the .org domain in June — a move that will protect millions of non-profit organizations and their donors from hacking attacks known as cache poisoning. Read the full article. Network World...

Inside the BBC's Chimera botnet

By Dancho Danchev, ZDNet Earlier this month, the controversial BBC purchase of a botnet and modifying the infected hosts in the name of “public interest” sparked a lot of debate on the pros and cons of their action. Condemned by certain security vendors, and naturally, at least from guerrilla PR...

BBC paid 'a few thousand dollars' for botnet

In a statement on Monday, the BBC said that its decision to purchase and use a botnet to espose the malware epidemic had been “in the public interest”. “It was not our intention to break the law,” the BBC told ZDNet UK on Monday. “There is a powerful public interest in demonstrating the ease with...