Hacking game accounts is a popular — and enriching — pastime. The rise of in-game marketplaces that can be used for buying and selling game commodities has attracted hackers who break into gamers’ accounts, steal their game commodities (and anything else they can find from personal data to parents’ bank card details) and sell them ..
Tag : Vulnerabilities
Researchers can earn up to $300,000 and a car if they manage to hack a Tesla Model 3 at this year’s Pwn2Own competition, Trend Micro’s Zero Day Initiative (ZDI) announced on Monday. Pwn2Own 2019, scheduled to take place on March 20-22 alongside the CanSecWest conference in Vancouver, Canada, introduces an automotive category for which a ..
Mozilla will soon disable Adobe Flash by default in Firefox, the first step toward completely removing support for the plugin in the browser. The change will be initially made in Firefox 69 Nightly, and will then get through the entire release cycle, the Internet organization says. “We are now scheduled to completely disable Flash in ..
Researchers discovered that a popular building access control system made by IDenticard contains vulnerabilities that can be exploited to create fake badges, disable door locks, and obtain or modify user data. IDenticard is a US-based provider of ID, access and security solutions. On its website, the company says it has tens of thousands of customers ..
Rapid7 on Friday announced the release of Metasploit 5.0. The latest major version of the popular penetration testing framework introduces several new important features, improved performance, and its developers say it should be easier to use. According to Rapid7, Metasploit 5.0 brings significant changes in terms of database and automation APIs, improving the way the ..
Juniper Networks this week released patches for more than 60 vulnerabilities in its Juniper Advanced Threat Prevention (ATP) appliance, Junos OS operating system, and Junos Space network management platform. Many of the security holes impact third-party components. In Juniper ATP appliances, the company addressed 13 flaws, including persistent cross-site scripting (XSS), arbitrary command execution, hardcoded ..
Facebook and Google have partnered to launch a new conference for the researchers interested on discovering and reporting vulnerabilities. Called BountyCon and mainly aimed at helping the two better identify new researchers in the Asia-Pacific region, as well as on incentivizing their existing bug bounty community, the conference is scheduled for March 30-31 in Singapore. ..
Hyatt Hotels Corporation on Wednesday announced the launch of a public bug bounty program that covers its websites and mobile applications. Hyatt and its affiliates operate over 750 hotels in more than 55 countries. The Chicago-based hotel operator disclosed two payment card breaches in the past years: one in 2016, which impacted 250 properties worldwide, ..
Cisco this week patched two serious denial-of-service (DoS) vulnerabilities that can be exploited remotely without authentication in its Email Security Appliance (ESA) products. One of the flaws, tracked as CVE-2018-15453 and classified as “critical,” has been described as a memory corruption issue caused by improper input validation in emails signed with Secure/Multipurpose Internet Mail Extensions ..
Google this week released its first set of security patches for Android in 2019, with fixes for more than two dozen vulnerabilities. The most important of the security bugs is CVE-2018-9583, a Critical remote code execution vulnerability addressed in System and included in the 2019-01-01 security patch level. A total of 13 security issues were ..
