2312 matches found
IRS Releases Ninth Security Tip
The Internal Revenue Service IRS has released the ninth in a series of tips intended to help the public protect personal and financial data online and at home. This tip describes new procedures taken by the IRS, state governments, and the tax industry to provide a safer, more secure filing...
PCI Council Gives Merchants Reprieve on PCI 3.1 Updates
The Payment Card Industry Security Standards Council PCI SSC released an update to its vulnerability standards and is giving merchants until June 2018 to migrate their security protocols, even though waiting is not recommended...
[SECURITY] Fedora 22 Update: firefox-43.0-1.fc22
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
PNG image processing library libpng exposed vulnerability-a vulnerability warning-the black bar safety net
! According to the report: image processing library libpng recently exposed vulnerabilities, currently has a preliminary fix vulnerabilities. Currently the main problem is the libpng the popularity of the range is too wide: operating systemthe browser any with generating a thumbnail associated...
[SECURITY] Fedora 22 Update: pdns-3.4.7-1.fc22
The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...
[SECURITY] Fedora 21 Update: firefox-42.0-2.fc21
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 23 Update: firefox-42.0-2.fc23
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Report from the PCI SSC North American Community Meeting
The Payment Card Industry Security Standards Council held their 2015 North American Community Meeting this year in Vancouver, BC, from September 29 - October 1. Coalfire was well represented at the meeting, with Dan Fritsche, Managing Director, Application Security, making two presentations at th...
[SECURITY] Fedora 22 Update: pdns-3.4.6-1.fc22
The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...
[SECURITY] Fedora 22 Update: firefox-41.0-4.fc22
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 21 Update: pdns-3.4.6-1.fc21
The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...
[SECURITY] Fedora 23 Update: firefox-41.0-4.fc23
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
HackerOne Vulnerability Coordination Maturity Model
The proliferation of independent and vendor-sponsored bug bounties has not only put some money in researchers’ pockets, but has also forced enterprises—and software makers—to put processes in place to handle outside bug reports. “Saying you want one is not enough,” said Katie Moussouris, chief...
standards.globalspec.com XSS vulnerability
Vulnerable URL: http://standards.globalspec.com/search/standards?query="-alert/xssposed/-"=new Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...
Google Outlines Plans to Deprecate RC4, SSLv3
As expected, Google formally announced its intent to move away from the stream cipher RC4 and the SSLv3 protocol this week, citing a long history of weaknesses in both. Adam Langley, a security engineer for the company, announced the plans through a blog post on Thursday. While there isn’t a...
Router devices do not implement sufficient UPnP authentication and security
Overview Home routers implementing the UPnP protocol do not sufficiently randomize UUIDs in UPnP control URLs, or implement other UPnP security measures. Description The UPnP protocol allows automatic device discovery and interaction with devices on a network. The UPnP protocol was originally...
How To Use WhatsApp Web Client on iPhone and Other iOS Devices
WhatsApp Web client support is now available for iOS users. That's right, now iOS users can access their instant messaging facility on the web; without taking the other route via jailbreaking. Eight months ago, on January 21, 2015, WhatsApp was made available on web browsers, and let Android,...
[SECURITY] Fedora 22 Update: icecast-2.4.2-1.fc22
Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...
[SECURITY] Fedora 21 Update: icecast-2.4.2-1.fc21
Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...