Mimosa Cloud. Invite friends, not hackers

TL;DR Global wireless network provider had an IDOR in their cloud management platform Anyone can create an account, anyone can upgrade that account to take control of anyone else’s devices Excellent VDP, responded to promptly Fixed in ONE WORKING DAY! Other vendors can learn from Mimosa Who? Mimo...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on April 8, 2014

Medium Alert ID: 33712 First Published: 2014 April 9 13:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase request for the recipient. The text in the email message attempts to convince the recipient to...

Google Cross Site Scripting

Universal XSS Vulnerability in all Google Services can compromise your personal information May 8th, 2009 Vulnerability Reported: 04/18/2009 9.33 pm Google’s Response: 04/18/2009 10.19 pm Wow! that was super fast for Saturday : Vulnerability Fixed: 05/05/2009 7.05 pm Change Propogated: 05/07/2009...