WiFi Bug Plagues Philips Internet-Enabled TVs

UPDATE — Some versions of Philips’ internet-enabled SmartTVs are vulnerable to cookie theft and a mélange of other tricks that abuse a lax WiFi setting. The problem lies in Miracast, a WiFi feature that comes enabled by default, with a fixed password, no PIN, and no request of permission, accordi...

Zero Day Vulnerability Patched in SCADA HMI Software

Malaysian SCADA software company Ecava released a patch yesterday for a zero-day vulnerability in its flagship human machine interface HMI that was publicly disclosed at a conference this week. The patch repairs a buffer overflow vulnerability in the company’s IntegraXor Web-based HMI software. H...

Flaw Leaves EA Origin Platform Users Open to Attack

Five years ago, a pair of security researchers write a book called Exploiting Online Games in which they described a number of ways in which attackers could take advantage of weaknesses in the protection systems for various gaming platforms. Now, with online gaming having emerged as a massive...

Samsung Smart TV Bug Allows Remote Access, Root Privileges

It turns out that some smart TVs are a little too smart for their own good–and the good of users. Some specific models of Samsung TVs that have Wi-Fi and other advanced capabilities have a flaw that enables an attacker to take a variety of actions on the TV, including accessing potentially...

Samsung smart TV vulnerability allow attacker to read storage remotely

ReVuln Ltd. , a small security company headed by Donato Ferrante and Luigi Auriemma, post a video that demonstrates that how attacks can gain root on the appliances. Samsung Smart TV contain a vulnerability which allows remote attackers to swipe data from attached storage devices. In this...

Steam Browser Protocol Vulnerability can allow hackers to hijack PC

Italian security Researchers Luigi Auriemma and Donato Ferrante from 'ReVuln' reported the flaw in Steam Browser Protocol. Stream the popular online distribution platform with 54 million users. The flaw allow the attacker to write arbitrary text to file and direct victims to external payloads and...

ReVuln Emerges as New Player in Vulnerability Sales Market

It’s getting difficult these days to keep track of all of the companies, public and otherwise, that are buying and selling vulnerabilities or information on bugs, and now there’s another group on the scene: ReVuln. But, unlike other companies in the industry, ReVuln is mostly focusing its efforts...