Lenovo Accelerator Application Vulnerability

Lenovo has issued a security advisory to address a vulnerability in the Accelerator Application software. Products affected by this vulnerability include the Lenovo notebook and desktop systems preloaded with the Windows 10 operating system. Exploitation of this vulnerability may allow a remote...

Spotify ArtistExplorer BB #1 - Cross Site Script Vulnerability

Document Title: =============== Spotify ArtistExplorer BB 1 - Cross Site Script Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1662 Release Date: ============= 2016-04-17 Vulnerability Laboratory ID VL-ID:...

Build a Town: Dream strategy - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Build a Town: Dream strategy published at the 'play' market has multiple vulnerabilities...

Bun Wars - Free Strategy Game - Base64 encoded String, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Bun Wars - Free Strategy Game published at the 'play' market has multiple vulnerabilities...

WarLight, Risk & Strategy - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application WarLight, Risk & Strategy published at the 'play' market has multiple vulnerabilities...

Space Dominion online strategy - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Space Dominion online strategy published at the 'play' market has multiple vulnerabilities...

Greed for Glory: War Strategy - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Greed for Glory: War Strategy published at the 'play' market has multiple vulnerabilities...

Lords & Knights - Strategy MMO - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Lords & Knights - Strategy MMO published at the 'play' market has multiple vulnerabilities...

Toy Defense - TD Strategy - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Toy Defense - TD Strategy published at the 'play' market has multiple vulnerabilities...

Grepolis - Divine Strategy MMO - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Grepolis - Divine Strategy MMO published at the 'play' market has multiple vulnerabilities...

Chess Strategy (1800-2400) - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Chess Strategy 1800-2400 published at the 'play' market has multiple vulnerabilities...

Locky Ransomware Now Part Of Massive Spam Attack

Researchers are tracking a massive spam campaign pelting inboxes with Locky ransomware downloaders in the form of JavaScript attachments. The huge spike, reported by security firm Trustwave, represents an extraordinary uptick in the attempted distribution of the Locky ransomware. Trustwave said...

File upload vulnerability example analysis-vulnerability warning-the black bar safety net

Principles File upload is a Web application that often appear in the function,it allows users to upload files to the server and saved to a specific location. This security is a very sensitive issue, once the malicious program is uploaded to the server and get the Execute permission, the...

Facebook Offering You $1000 to Run Advertisement Against Terrorism

Over a past few times, we have seen a steady growth in the online recruitment of Jihadis from social networking sites by many radical groups. ISIS has topped the online recruitment, and it is the only terror group that leverages the enormous power of Twitter and Facebook to radicalize young minds...

2014-2015 Professional Reading Round-Up

At an earlier point in my career, I used to read a lot of technical security books. From 2006 to 2012 I published a series of Best Book Bejtlich Read posts. Beginning in 2013 I became much more interested in military-derived strategy and history, dating back to my studies at the Air Force Academy...

Windows 2008 GPP exploit-vulnerability warning-the black bar safety net

The test environment Windows 7 ordinary members of the domain Windows 2008 domain controller The first deployment of the GPP, here my deployment strategy is to the domain members are added to a test user, the password is test123 ! Add a local user ! Then came the Group Policy Management ! Will th...

2016 Cybersecurity Predictions

The lessons learned from this past year teach us that no one is immune to cyber threats. The sooner corporate boards and executives come to understand that cybersecurity breaches are a very real and pervasive threat; then the hard work can begin to take preemptive measures and prepare an...

Like it or not, Microsoft Plans to Push Windows 10 Upgrade more Aggressively

This is no surprise that Microsoft wants you to install Windows 10. But, Hey Microsoft, Not everyone wants to upgrade to Windows 10. Many people are happy with Windows 7 or Windows 8.1 OS and don’t want to switch to the newest Windows 10 operating system. Days after the launch of Windows 10,...

Not So Fast! Boyd OODA Looping Is More Than Speed

The name "John Boyd" and the term "OODA Loop" are probably familiar to many of the readers of this blog. I've mentioned one or the other in 2006, 2007, 2009 twice, and 2014. Boyd was a fighter pilot in the Korean war and revolutionized thinking on topics like fighter design and military strategy...

Google is Merging its Chrome OS with Android

Google is planning to merge its Chrome OS with Android operating system and roll out a single operating system by 2017. New Android OS Optimized for Laptops: Yes, a Single Operating system for Mobile devices, desktops, laptops and notebooks, just what Microsoft is offering to its users with Windo...