St. Jude Patches Additional Cardiac Device

St. Jude Medical has patched a vulnerability in another Merlin@home Transmitter medical device vulnerable to a man-in-the-middle attack. The medical device maker issued an update on Monday for its Merlin@home Transmitter “inductive” models, expanding the number of devices impacted by a...

On the Star Wars Twitter Botnet, the Return of Lavabit, Ransomware and More

Mike Mimoso and Chris Brook discuss the news of the week, including the Star Wars Twitter botnet, the return of Lavabit, a critical Cisco Webex flaw, and the St. Louis Library ransomware story. Download: ThreatpostNewsWrapJanuary272017.mp3 Music by Chris Gonsalves...

St. Louis Public Library Recovers from Ransomware Attack

Services are being restored to the St. Louis Public Library computer system after a ransomware attack last Thursday impacted access to machines and data at all 17 branches. Library management refused to pay the $35,000 demanded as ransom, and IT staff wiped affected servers and restored them from...

Justine Bone on St. Jude Vulnerabilities and Medical Device Security

MedSec CEO Justine Bone talks to Mike Mimoso about the St. Jude Medical vulnerabilities, the considerations her company and Muddy Waters made in short selling St. Jude stock, and the current state of medical device security. Download: JustineBoneonSt.JudeVulnerabilitiesandMedicalDeviceSecurity.mp...

Saying Goodbye to the ShadowBrokers, GoDaddy's Domain Validation Issue, and More

Mike Mimoso and Chris Brook discuss the news of the week, including the ShadowBrokers’ farewell, GoDaddy’s buggy domain validation issue, MongoDB ransoms, and the latest with St. Jude Medical. Show notes: ShadowBrokers Bid Farewell, Close Doors ShadowBrokers Selling Windows Exploits, Attack Tools...

stagneshs.org XSS vulnerability

Vulnerable URL: https://www.stagneshs.org/apps/album/index.jsp?dir=departments/79395=--%3E%22%3E%3C/a%3E%3C/script%3E%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E!albumRECID=25974=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS...

Merlin@home Man-in-the-Middle Security Bypass Vulnerability

St.JudeMedicalMerlin@hometransmitter是美国St.JudeMedical公司的一款用于对植入心脏装置的患者进行远程护理管理的产品. A man-in-the-middle security bypass vulnerability exists in Merlin@home. A remote attacker could exploit this vulnerability to access or affect communications between Merlin.net and the transmitter terminal...

St. Jude Medical Patches Vulnerable Cardiac Devices

St. Jude Medical today released an update for the Merlin@home Transmitter medical device that includes a patch for vulnerabilities made public last year in a controversial disclosure by research company MedSec Holdings and hedge fund Muddy Waters. In a paper published last August, Muddy Waters sa...

ICSMA-17-009-01A_St. Jude Merlin@home Transmitter Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSMA-17-009-01 St. Jude Merlin@home Transmitter Vulnerability that was published January 9, 2017, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 5 -------- MedSec Holdings has identified a channel...

stjohnhubbells.org XSS vulnerability

Vulnerable URL: http://stjohnhubbells.org/search.php?pageID=search=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

stpaulscdcnj.org XSS vulnerability

Vulnerable URL: http://www.stpaulscdcnj.org/program.php?name=youthbuild" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21678042 VIP website status:| No...

St. Jude Faces New Claim Heart Devices are Hackable

St. Jude Medical is facing fresh allegations its heart implant devices are vulnerable to cyberattacks. The claims were introduced by the defense as part of St. Jude’s defamation lawsuit against short seller Muddy Waters and security firm MedSec. In a legal filing submitted Monday, experts hired b...

FDA, DHS Investigating St. Jude Device Vulnerabilities

The U.S. government has entered into the St. Jude-MedSec-Muddy Waters fray with an investigation into claims St. Jude medical devices are vulnerable to cyberattacks. The Food and Drug Administration and Department of Homeland Security also apparently disapprove of the approach taken by MedSec and...

St. Jude Alleges False Claims, Stock Manipulation in Suit Against Med Sec, Muddy Waters

St. Jude Medical yesterday filed a lawsuit alleging that investment research firm Muddy Waters and healthcare security research company Med Sec made false claims in a report focused on the security of St. Jude products. The report released Aug. 25 warned of potentially catastrophic cybersecurity...

classifieds.stcatharinesstandard.ca XSS vulnerability

Vulnerable URL: http://classifieds.stcatharinesstandard.ca/st-catharines/all-categories/search?searchtype=advancedsearchkeyword=%22%3E%3Csvg%20onload=prompt%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 18:29 GMT...

Researchers: MedSec, Muddy Waters Set Bad Precedent With St. Jude Medical Short

Security researchers warn mixing vulnerability disclosures with stock market bets sets a troubling precedent that erodes confidence in the relationship between businesses and white hat hackers who help uncover threats. Researchers are responding to the unprecedented partnership between security...

Pacemaker Hacking Fears Rise With Critical Research Report

Pacemakers, defibrillators and other medical devices made by a leading medical equipment maker are vulnerable to potentially “catastrophic” cyberattacks. With relatively little effort tens of thousands of cardiac devices made by St. Jude Medical are vulnerable to attack, according a report releas...

Former Cardinals Scout Christopher Correa Sentenced Four Years for Houston Astros Hack

The Federal Court came down hard on a former scouting director for the St. Louis Cardinals on Monday, sentencing Christopher Correa to almost four years in prison for hacking into a computer system that belongs to the Houston Astros. Correa, who until last summer served as Director of Baseball...

stalbansnth.vic.edu.au XSS vulnerability

Open Bug Bounty ID: OBB-160139 Description| Value ---|--- Affected Website:| stalbansnth.vic.edu.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stjohnqld.com.au XSS vulnerability

Vulnerable URL: http://www.stjohnqld.com.au/Search-Results.aspx?searchtext=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...