No money was paid and no information was lost during a ransomware cyberattack that exploited a cloud-based vulnerability in the Colorado Department of Transportation’s computer network last spring, officials said Wednesday. CDOT was one of several government agencies across the country targeted by two Iranian computer hackers in the sweeping extortion scheme, according to a ..
Tag : Vulnerabilities
Cisco has fixed a vulnerability in the web framework code of Cisco Prime License Manager that could allow an attacker to execute arbitrary SQL queries. The security flaw, which could be exploited remotely without authentication, is the result of lack of proper validation of user-supplied input in SQL queries. As a result, an attacker could ..
A team of researchers has introduced the concept of smart greybox fuzzing, which they claim is much more efficient in finding vulnerabilities in libraries that parse complex files compared to existing fuzzers. Fuzzing is used to find software vulnerabilities by sending malformed input to the targeted application. If the software crashes or behaves unexpectedly, it ..
Security blogger Brian Krebs revealed recently that an API used by the United States Postal Service (USPS) had a vulnerability that potentially exposed the data of 60 million customers. read more http://feedproxy.google.com/~r/Securityweek/~3/97PQz8LrbFk/industry-reactions-usps-exposing..
Cisco has released a new round of patches for a potentially serious Webex vulnerability first addressed one month ago. read more http://feedproxy.google.com/~r/Securityweek/~3/EPyRm-cgsqQ/cisco-releases-second-patch-webex-meetings-vul..
Siemens informed customers on Tuesday that some of the Linux and GNU components of a multifunctional platform for its SIMATIC S7-1500 industrial automation controllers are affected by over 20 vulnerabilities. read more http://feedproxy.google.com/~r/Securityweek/~3/UZZ75TpQzu0/siemens-warns-linux-gnu-flaws-controlle..
Researchers with software risk measurement and management company Checkmarx were able to create two mobile applications that abuse the functionality of smart bulbs for data exfiltration. read more http://feedproxy.google.com/~r/Securityweek/~3/nBPYbckxA1c/researchers-use-smart-bulb-data-ex..
Two recently disclosed Linux kernel vulnerabilities that remain unpatched could be exploited for local denial-of-service (DoS). The flaws, both which were made public last week, impact Linux kernel 4.19.2 and previous versions. Both represent NULL pointer deference bugs that can be exploited by local attackers and are considered Medium severity. read more http://feedproxy.google.com/~r/Securityweek/~3/K1BFVUMonzo/dos-vulnerabilities-impact-li..
The United States Postal Service (USPS) has fixed an API flaw that potentially exposed data on 60 million customers. A researcher reported the flaw to USPS more than a year ago; but it wasn’t until security blogger Brian Krebs contacted the organization this month that it took any action. read more http://feedproxy.google.com/~r/Securityweek/~3/ucOraj_F9Ik/us-postal-service-api-flaw-exposes-data-60-million..
VMware Fixes Vulnerability That Earned Researcher $100,000 at Hacking Contest VMware has patched a critical Workstation and Fusion vulnerability disclosed recently by a researcher at a hacking competition in China. read more http://feedproxy.google.com/~r/Securityweek/~3/I-MA9u5cPNk/vmware-patches-workstation-flaw-disclosed-hacki..
