Privacy and human rights organizations expressed concern Tuesday after a coalition of intelligence agencies renewed a call for technology companies to allow so-called “backdoor” access to encrypted content and devices.
http://feedproxy.google.com/~r/Securityweek/~3/3q4BQk8XDFE/five-eyes-agencies-demand-reignites-encryption-debate
Malicious actors could take control of thousands of 3D printers that can be accessed directly from the Internet without requiring any authentication.
According to the SANS Internet Storm Center, a Shodan search reveals over 3,700 instances of OctoPrint interfaces exposed to the Web, including nearly 1,600 in the United States.
http://feedproxy.google.com/~r/Securityweek/~3/AzwR7a0UaKs/thousands-3d-printers-exposed-remote-attacks
A patch is available for a <span style="font-size: 11pt; color: #0563c1; background-color: transparent; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-variant-east-asian: normal; font-variant-position: normal; -webkit-text-decor
http://feedproxy.google.com/~r/Securityweek/~3/waCoPDQxGFw/third-party-patch-released-windows-zero-day
A critical remote code execution vulnerability was recently addressed in packagist.org<span style="color: #000000; background-color: transparen
http://feedproxy.google.com/~r/Securityweek/~3/U7DJsuIJ_Co/critical-vulnerability-patched-php-package-repository
A Critical remote code execution vulnerability in Apache Struts 2 that was patched last week is already being abused in malicious attacks, threat intelligence firm Volexity warns.
http://feedproxy.google.com/~r/Securityweek/~3/tvn8ex-ezDI/critical-apache-struts-vulnerability-exploited-live-attacks
Details of an unpatched vulnerability in Microsoft’s Windows 10 operating system were made public on Monday, via Twitter.
http://feedproxy.google.com/~r/Securityweek/~3/qgMCDmnqsn0/exploit-published-windows-task-scheduler-zero-day
Exploit code for a <span style="color: #0563c1; background-color:
http://feedproxy.google.com/~r/Securityweek/~3/lgI_OjZMSQQ/exploit-recent-critical-apache-struts-vulnerability-published
As part of its unified bug bounty program, online publishing giant Oath has paid over $1 million in rewards for verified bugs, the company announced this week.
http://feedproxy.google.com/~r/Securityweek/~3/VJ7oYX_oud4/oath-pays-over-1-million-bug-bounties
Intel has made significant changes to the license for its latest CPU microcode updates after users complained that the previous version banned benchmarks and comparison tests.
http://feedproxy.google.com/~r/Securityweek/~3/wYWpALsdVI4/intel-simplifies-microcode-update-license-following-complaints
Japanese electrical engineering company Yokogawa published two security advisories last week to inform customers that some of its products are affected by serious vulnerabilities.
http://feedproxy.google.com/~r/Securityweek/~3/7iCz38x-nD0/severe-flaws-found-yokogawa-switches-control-systems