Recently patched vulnerabilities in the popular AMP for WP plugin are being targeted in an active Cross-Site Scripting (XSS) campaign, Wordfence reports.
http://feedproxy.google.com/~r/Securityweek/~3/OklcMMusDf8/attackers-exploit-recently-patched-popular-wordpress-plugin
Several vulnerabilities have been found by researchers in Dell EMC Avamar and Integrated Data Protection Appliance products. VMware’s vSphere Data Protection, which is based on Avamar, is also impacted.
http://feedproxy.google.com/~r/Securityweek/~3/JDUkQBkNjK0/patches-released-flaws-affecting-dell-emc-vmware-products
http://feedproxy.google.com/~r/Securityweek/~3/1WVAxwvgRvw/facebook-increases-rewards-account-hacking-vulnerabilities
Security updates released on Tuesday by Adobe for Flash Player address a critical vulnerability whose details were disclosed a few days earlier.
http://feedproxy.google.com/~r/Securityweek/~3/z6guSpMEl-I/flash-player-update-patches-disclosed-code-execution-flaw
A recent attack targeted Drupal web servers with a chain of vulnerabilities that included the infamous Drupalgeddon2 and DirtyCOW flaws, Imperva security researchers say.
The attack was short and impacted only some Linux-based systems, but it was noteworthy for attempting to persistently infect vulnerable servers and take over machines.
http://feedproxy.google.com/~r/Securityweek/~3/_3H7sgSBZlg/attackers-target-drupal-web-servers-chained-vulnerabilities
People who have synced their mobile phones with a wide variety of vehicle infotainment systems may have have their personal information exposed to a new type of vehicle hack, security researchers say.
http://feedproxy.google.com/~r/Securityweek/~3/FTQjUNrOVbs/new-vehicle-hack-exposes-users%E2%80%99-private-data-bluetooth
Instagram informed some users last week that their passwords may have been exposed as a result of using the “Download Your Data” tool.
http://feedproxy.google.com/~r/Securityweek/~3/0Kpjx4oeQzs/instagram-download-tool-exposes-user-passwords
White hat hackers earned more than $1 million for exploits disclosed at the Tianfu Cup PWN hacking competition that took place on November 16-17 in Chengdu, the capital of China’s Sichuan province.
http://feedproxy.google.com/~r/Securityweek/~3/Y4mA4d_0z70/hackers-earn-1-million-zero-day-exploits-chinese-competition
Many automated teller machines (ATMs) lack adequate security mechanisms and can be compromised in minutes using various methods, according to a new report from vulnerability assessment firm Positive Technologies.
http://feedproxy.google.com/~r/Securityweek/~3/fJSQYupR3IE/many-atms-can-be-hacked-minutes-report
The U.S. Office of Personnel Management (OPM) has improved its security posture since the data breaches disclosed in 2015, but many issues are still unresolved, according to a report published this week by the Government Accountability Office (GAO).
http://feedproxy.google.com/~r/Securityweek/~3/7DZeTM2XPas/opm-security-improves-many-issues-still-unresolved-gao