3290 matches found
Election Security
Stanford University's Cyber Policy Center has published a long report on the security of US elections. Summary: it's not good...
Iran Shoots Down a US Drone, Apple Recalls MacBook Batteries, and More News
Catch up on the most important news from today in two minutes or less...
Iranian Hackers Launch a New US-Targeted Campaign as Tensions Mount
Three cybersecurity firms have identified phishing attacks stemming from Iran—that may lay the groundwork for something more destructive...
US to Russia on Nuke Experiments: Do as We Say, Not as We Do
The US is quietly ramping up its plutonium experiments even as Washington raises concerns about Russian testing...
Cross-Site Scripting
Overview Versions of keystone prior to 4.0.0 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize user input on the Contact Us page, allowing attackers to submit contact forms with malicious JavaScript in the message field. The output is not properly encoded leading an admin...
Hackers Target US Power, Amazon Clones a Neighborhood, and More News
Catch up on the most important news from today in two minutes or less...
The Highly Dangerous 'Triton' Hackers Have Probed the US Grid
The same hackers behind a potentially lethal 2017 oil refinery cyberattack are now sniffing at US electrical utility targets...
Border Patrol data breach: Footages of tourists entering/exiting the US compromised
By Waqas The data breach took place after a database used by Border Patrol was hit by a "malicious cyber-attack." The officials from US Customs and Border Protection CBP have revealed that one of their subcontractors have been targeted with a “malicious” cyber attack due to which the pictures of...
IoT Security Regulation is on the Horizon
LONDON, UK – Internet of things IoT device security continues to worry the tech industry – however, experts believe that the right type of global regulation could be key for ensuring security standards. The question is when those regulatory efforts will be fleshed out. Ken Munro, with Pen Test...
Chinese Military Wants to Develop Custom OS
Citing security concerns, the Chinese military wants to replace Windows with its own custom operating system: Thanks to the Snowden, Shadow Brokers, and Vault7 leaks, Beijing officials are well aware of the US' hefty arsenal of hacking tools, available for anything from smart TVs to Linux servers...
News Wrap: Which Companies Are Doing Privacy Right and Which Aren't?
The Threatpost team breaks down the top data privacy-related news this week, including: Google’s acknowledgement that G Suite passwords had been stored in plaintext – since 2005. The database of golfing app Game Golf left misconfigured, exposing millions of data points on games played plus...
Facial Recognition Has Already Reached Its Breaking Point
Facial recognition technology has proliferated unchecked in the US so far. Congress finally seems ready to do something about it...
Google bans Huawei from accessing Android & its licensed apps
By Uzair Amir Intel Corp., Broadcom Inc., Qualcomm Inc., Xilinx Inc., etc., have also refused to supply critical components and software to Huawei. The US has decided to deny Huawei Technologies Co., a major Chinese tech firm, access to US technology to prevent Huawei’s growing influence in the...
US Tech Giants Google, Intel, Qualcomm, Broadcom Break Up With Huawei
Google has reportedly suspended all businesses with the world's second-biggest smartphone maker, Huawei, and revoked its Android license effective immediately—a move that will have a drastic impact on Huawei devices across the globe. Revoking Android license means Huawei future smartphones will n...
Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-26293 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0086 , CVE-2019-0089 , CVE-2019-0090 , CVE-2019-0091 , CVE-2019-0092 , CVE-2019-0093 , CVE-2019-0094 ,...
WordPress Form Maker 1.13.3 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress Plugin Form Maker 1.13.3 - SQL Injection Exploit Author: Daniele Scanu @ Certimeter Group Vendor Homepage: https://10web.io/plugins/ Software Link: https://wordpress.org/plugins/form-maker/ Version: 1.13.3 Tested on:...
How Tech Helped the NSC Change the US Way of War
The National Security Council has gained enormous influence over the last few decades—thanks in no small part to better tech...
North Korean Hackers Using ELECTRICFISH Tunnels to Exfiltrate Data
The U.S. Department of Homeland Security DHS and the FBI have issued another joint alert about a new piece of malware that the prolific North Korean APT hacking group Hidden Cobra has actively been using in the wild. Hidden Cobra, also known as Lazarus Group and Guardians of Peace, is believed to...
Excerpts from “5 Questions for Eric O’Neil—the FBI “ghost” who brought down a Russian Mole”
Eric O’Neill serves as Carbon Black’s national security strategist where he is a thought leader on a wide range of issues including counterterrorism and national security matters. Prior to this, he was as an operative for the FBI, where he conducted national security field operations against...