How Trump’s Ukraine Mess Entangled CrowdStrike

A US cybersecurity company became a topic of interest for President Donald Trump in his call with Ukraine’s Volodymyr Zelensky...

Trump’s Ukraine Mess Feels a Little Too Familiar

The unfolding drama ties two key threads of the Trump era: foreign interference in US elections and the president's distrust of his own intel agencies...

Edward Snowden in His Own Words: Why I Became a Whistle-Blower

Book excerpt: As a systems administrator, the young man who would expose vast, secret US surveillance saw freedom being encroached and decided he had to act...

We All Could Pay a Price for the Latest Slap at Huawei

An international cybersecurity group has evicted the Chinese telecom company to comply with US sanctions. That could allow malware to spread more easily...

CEOs offer their own view of a US data privacy law

Last week, the chief executives of more than 50 mid- and large-sized companies urged Congress to pass a national data privacy law to regulate how companies collect, use, and share Americans’ data. Buried deep within the chief executives’ recommendations for such a law, presented as a policy...

U.S. Sanctions North Korean Group Behind WannaCry, Sony Hacks

The U.S. has slapped sanctions on three well-known North Korean state-sponsored hacker groups – including the group that was tied to the 2017 WannaCry ransomware attacks and the 2014 cyberattack on Sony Pictures Entertainment. The three that were sanctioned are the infamous Lazarus Group, as well...

US Sanctions 3 North Korean Hacking Groups Accused for Global Cyber Attacks

The United States Treasury Department on Friday announced sanctions against three state-sponsored North Korean hacking groups for conducting several destructive cyberattacks on US critical infrastructure. Besides this, the hacking groups have also been accused of stealing possibly hundreds of...

DetExploit - Software That Detect Vulnerable Applications, Not-Installed OS Updates And Notify To User

DetExploit is software that detect vulnerable applications and not-installed important OS updates on the system, and notify them to user. As we know, most of cyberattacks uses vulnerability that is released out year before. I thought this is huge problem, and this kind of technology should be mor...

CVE-2019-10073: Improper Neutralization of Input During Web Page Generation

The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to Stored XSS attacks. Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16.11: 1858438, 1858543, 1860595 and 1860616...

PT-2019-11417

Name of the Vulnerable Software and Affected Versions: Apache OFBiz versions prior to 16.11.06 Description: The issue affects the "Blog", "Forum", "Contact Us" screens of the "ecommerce" application template in Apache OFBiz, making them susceptible to Stored XSS attacks. Recommendations: For...

ICSA-19-253-03_Siemens Industrial Products (Update P)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Industrial Products Vulnerabilities: Excessive Data Query Operations in a Large Data Table, Integer Overflow or Wraparound, Uncontrolled Resource Consumption 2. UPDATE INFORMATION...

An Unprecedented Cyberattack Hit the US Power Grid

Exposed Facebook phone numbers, an XKCD breach, and more of the week's top security news...

Unsecured database leaks phone numbers of 419 million Facebook users

By Sudais The unsecured database contained 133 million records from the US, 18 million in the UK and 50 million in Vietnam - All from Facebook users. This is a post from HackRead.com Read the original post: Unsecured database leaks phone numbers of 419 million Facebook users...

CVE-2019-14261

An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent between wireless peripheral components, e.g., wireless detectors or remote controls, and the ABUS...

CVE-2015-9369

Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9369

CVE-2015-9369 affects the WordPress plugin Easy US Sales Taxes Add-on for iThemes Exchange (before 1.1.0). The vulnerability is an XSS flaw triggered via the functions add_query_arg() and remove_query_arg(), enabling attacker-controlled client-side code execution in affected contexts. The root ca...

CVE-2015-9369: Improper Neutralization of Input During Web Page Generation

Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

PT-2019-7328

Name of the Vulnerable Software and Affected Versions Easy US Sales Taxes Add-on for iThemes Exchange versions prior to 1.1.0 Description The issue concerns a problem with the Easy US Sales Taxes Add-on for iThemes Exchange, where there is a potential for XSS Cross-Site Scripting attacks. This is...

Ransomware continues assault against cities and businesses

Ransomware continues to make waves in the US, forcing multiple cities and organizations into tough choices. Pressed for cash and time, local government organizations are left with few options: Either pay the ransom as soon as possible and encourage criminals to continue bringing essential service...

Dow Jones Hammer - Protect The Cloud With The Power Of The cloud(AWS)

Dow Jones Hammer is a multi-account cloud security tool for AWS. It identifies misconfigurations and insecure data exposures within most popular AWS resources, across all regions and accounts. It has near real-time reporting capabilities e.g. JIRA, Slack to provide quick feedback to engineers and...