Flaws in Smart City Systems Can Allow Hackers to Cause Panic
http://feedproxy.google.com/~r/Securityweek/~3/4vHfflPXNeE/flaws-smart-city-systems-can-allow-hackers-cause-panic
Flaw in BIND Security Feature Allows DoS Attacks
The Internet Systems Consortium (ISC) revealed on Wednesday that the BIND DNS software is affected by a serious vulnerability that can be exploited for denial-of-service (DoS) attacks.
http://feedproxy.google.com/~r/Securityweek/~3/ZAEmpBPtgIo/flaw-bind-security-feature-allows-dos-attacks
Serious OpenEMR Flaws Expose Medical Records
Researchers have discovered nearly two dozen vulnerabilities in the OpenEMR software, including critical flaws that can be exploited to gain unauthorized access to medical records.
http://feedproxy.google.com/~r/Securityweek/~3/aD8bMvQtthM/serious-openemr-flaws-expose-medical-records
HP Patches Critical RCE Flaws in Inkjet Printers
HP has released firmware updates for many of its ink printers to address a couple of critical vulnerabilities that can be exploited for remote code execution.
http://feedproxy.google.com/~r/Securityweek/~3/-DJl7kW13wo/hp-patches-critical-rce-flaws-inkjet-printers
Samsung Patches Critical Vulnerabilities in SmartThings Hub
Samsung has patched a series of critical vulnerabilities in its SmartThings Hub, which could be exploited to execute OS commands or other arbitrary code on vulnerable devices.
http://feedproxy.google.com/~r/Securityweek/~3/8LRI_A9Fdwk/samsung-patches-critical-vulnerabilities-smartthings-hub
Office Vulnerabilities Chained to Deliver Backdoor
A recently observed malicious campaign is abusing two chained Office documents, each exploiting a different vulnerability, to deliver the FELIXROOT Backdoor, FireEye reports.
http://feedproxy.google.com/~r/Securityweek/~3/ohJ-LQTZanI/office-vulnerabilities-chained-deliver-backdoor
Remote Spectre Attack Allows Data Theft Over Network
A team of researchers from the Graz University of Technology in Austria has demonstrated that Spectre attacks can be launched remotely without the need to execute code on the targeted machine.
http://feedproxy.google.com/~r/Securityweek/~3/pxnBkrtKbYU/remote-spectre-attack-allows-data-theft-over-network
Senator Urges Federal Agencies to Ditch Adobe Flash
United States Senator Ron Wyden on Wednesday sent a letter to national agencies demanding a collaboration on ending the government use of Adobe Flash.
http://feedproxy.google.com/~r/Securityweek/~3/2XOCfZvO9BM/senator-urges-federal-agencies-ditch-adobe-flash
Car Sharing Apps Vulnerable to Hacker Attacks: Kaspersky
Researchers at Kaspersky Lab have analyzed over a dozen mobile applications provided by car sharing companies and discovered serious security holes that can be exploited to obtain personal information and even steal vehicles.
http://feedproxy.google.com/~r/Securityweek/~3/ONYGA1rIqOM/car-sharing-apps-vulnerable-hacker-attacks-kaspersky
Researchers Resurrect Decade-Old Oracle Solaris Vulnerability
One of the Solaris vulnerabilities patched by Oracle with its July 2018 Critical Patch Update (CPU) exists due to an ineffective fix implemented by the company for a flaw first discovered in 2007.
http://feedproxy.google.com/~r/Securityweek/~3/x3X58q4AHa4/researchers-resurrect-decade-old-oracle-solaris-vulnerability