Microsoft Unveils Special Version of Windows 10 For Chinese Government

China is very strict about censorship, which is why the country has become very paranoid when it comes to adopting foreign technologies. The country banned Microsoft's Windows operating system on government computers in 2014 amid concerns about security and US surveillance. Even in the wake of...

Dridex and Locky Return Via PDF Attachments in Latest Campaigns

Dridex and Locky, two prolific malware families that made waves in 2016 after being distributed in several high-volume spam campaigns, have returned after a brief hiatus. FireEye observed a decline in the volume of Dridex and Locky in the latter half of 2016, but we recently observed two new larg...

Dridex and Locky Return Via PDF Attachments in Latest Campaigns

Dridex and Locky, two prolific malware families that made waves in 2016 after being distributed in several high-volume spam campaigns, have returned after a brief hiatus. FireEye observed a decline in the volume of Dridex and Locky in the latter half of 2016, but we recently observed two new larg...

Microsoft Finally Reveals What Data Windows 10 Collects From Your PC

Since the launch of Windows 10, there has been widespread concern about its data collection practices, mostly because Microsoft has been very secretive about the telemetry data it collects. Now, this is going to be changed, as Microsoft wants to be more transparent on its diagnostics data...

Android Variant of Notorious Pegasus Spyware Found

Researchers say a variant of the notorious surveillance software called Pegasus has been found targeting Android users, allowing third parties to take screenshots, capture audio, read email and exfiltrate data from targeted phones. The malware, called Chrysaor, was discovered through a joint effo...

Verizon to pre-install a 'Spyware' app on its Android phones to collect user data

If the death of online privacy rules wasn't enough for Internet Service Providers and advertisers to celebrate, Verizon has planned to pre-install spyware on customers' Android devices in order to collect their personal data. The telecom giant has partnered with Evie Launcher to bring a new...

Cross site scripting

An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. The Web Interface does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output; this could allow for cross-site scripting...

CVE-2016-2274

An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. The Web Interface does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output; this could allow for cross-site scripting...

CVE-2016-2274

The CVE-2016-2274 issue affects the Adcon Telemetry A850 Telemetry Gateway Base Station web interface. The vulnerability is a Cross-Site Scripting (CWE-79) due to improper neutralization of user-controlled input before output, enabling injection of arbitrary JavaScript. Impact is described as pot...

CVE-2016-2274

An issue was discovered in Adcon Telemetry A850 Telemetry Gateway Base Station. The Web Interface does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output; this could allow for cross-site scripting...

PT-2016-7860 · Pivotal +4 · Rabbitmq +3

Name of the Vulnerable Software and Affected Versions: Pivotal RabbitMQ versions 3.x through 3.5.7 Pivotal RabbitMQ versions 3.6.x through 3.6.5 RabbitMQ for PCF versions 1.5.x through 1.5.19 RabbitMQ for PCF versions 1.6.x through 1.6.11 RabbitMQ for PCF versions 1.7.x through 1.7.6 Description:...

UBUNTU-CVE-2016-9877

An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT MQ Telemetry Transport connection authentication with a username/password pair succeeds if an existing username is provid...

Adcon Telemetry A850 Telemetry Gateway Base Station Cross-Site Scripting Vulnerability

The Adcon Telemetry A850 Telemetry Gateway Base Station is a wireless telemetry system from Adcon Telemetry of Austria. A cross-site scripting vulnerability exists in the Adcon Telemetry A850 Telemetry Gateway Base Station. An attacker can exploit this vulnerability to inject arbitrary JavaScript...

Microsoft Shares Telemetry Data Collected from Windows 10 Users with 3rd-Party

Cyber security is a major challenge in today's world, as cyber attacks have become more automated and difficult to detect, where traditional cyber security practices and systems are no longer sufficient to protect businesses, governments, and other organizations. In past few years, Artificial...

Free SSL Sparks Unprecedented Growth in Encrypted Traffic

If recent telemetry from Mozilla is indeed representative of the Internet, then it would appear that half of all traffic in transit is encrypted, a more than 10 percent jump from last December. The emergence of free Certificate Authorities such as Let’s Encrypt, and similar gratis HTTPS certifica...

Cumulative update for Windows 10 Version 1511: October 11, 2016

None None...

October 11, 2016 — KB3192441 (OS Build 10586.633)

None None...

XenDesktop 7.8 and 7.9 - System Hangs on Telemetry Service

Customers report provisioned targets device running VDA 7.8, hang after system boot on screen "please wait" or "getting devices ready" VDA 7.8 or 7.9 is booted and hangs at one of below reported screens at console, never progressing further: "Please wait" spinning wheel, "Please wait while...

Adcon Telemetry A850 Telemetry Gateway Base Station Vulnerabilities

OVERVIEW Independent researcher Aditya K. Sood has identified a cross-site scripting vulnerability in Adcon Telemetry’s A850 Telemetry Gateway Base Station. Adcon Telemetry has produced a new firmware version to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED...

The vulnerability of the WebSphere MQ message processing service, which allows a hacker to obtain confidential information

The vulnerability of the MQXR component of the WMQ Telemetry service in the WebSphere MQ processing system lies in the fact that registration data is stored in an open text file. Exploiting this vulnerability could allow a local attacker to obtain confidential information...