Japanese electrical engineering company Yokogawa has released firmware updates for its STARDOM controllers to address a critical vulnerability that can be exploited remotely to take control of the device. read more http://feedproxy.google.com/~r/Securityweek/~3/4Z1OndHMaXE/hardcoded-credentials-expose-yokogawa-controlle..
Tag : Vulnerabilities
Eventbrite-owned ticket distribution service Ticketfly shut down its website on Thursday after it was defaced by a hacker who calls himself “IsHaKdZ.” read more http://feedproxy.google.com/~r/Securityweek/~3/6AWjyaOLrfE/personal-data-compromised-tick..
HackerOne announced on Wednesday the results of “Hack the DTS,” the fifth bug bounty program run by the U.S. Department of Defense (DOD). read more http://feedproxy.google.com/~r/Securityweek/~3/gZQBot5oGJs/tens-vulnerabilities-found-pentagon-travel-managem..
Earlier this year, a security researcher discovered that it was possible to bypass Google’s reCAPTCHA via HTTP parameter pollution. read more http://feedproxy.google.com/~r/Securityweek/~3/qBNr7DuBJ7w/http-parameter-pollution-leads-recapt..
Google this week released Chrome 67 to the stable channel to provide various improvements, including patches for 34 vulnerabilities. read more http://feedproxy.google.com/~r/Securityweek/~3/8GYIsPBhsls/chrome-67-patches-34-vulne..
Vulcan Cyber is the latest Israel-based cybersecurity startup to emerge from stealth mode. The company, whose main product is a vulnerability remediation platform, announced on Wednesday that it raised $4 million in seed funding. read more http://feedproxy.google.com/~r/Securityweek/~3/zQjyFvUbtjA/vulcan-cyber-emerges-stealth-4-million-..
Updates released on Tuesday for the Git version control system patch two security flaws, including a serious vulnerability that can be exploited for remote code execution using specially crafted repositories. read more http://feedproxy.google.com/~r/Securityweek/~3/0irDZnHrkgw/remote-code-execution-vulnerability-p..
Three vulnerabilities discovered by a researcher in IBM’s QRadar product can be chained for an exploit that allows a remote and unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges. read more http://feedproxy.google.com/~r/Securityweek/~3/ir-_2xhHtfU/flaws-ibm-qradar-allow-remote-command..
(credit: Linksys) The FBI is advising users of consumer-grade routers and network-attached storage devices to reboot them as soon as possible to counter Russian-engineered malware that has infected hundreds of thousands devices. Researchers from Cisco’s Talos security team first disclosed the existence of the malware on Wednesday. The detailed report said the malware infected more ..
Schneider Electric this week announced that an update for its EcoStruxure Machine Expert product patches a high severity vulnerability that can be exploited remotely to obtain sensitive data. read more http://feedproxy.google.com/~r/Securityweek/~3/2kAYORjOcss/flaw-schneider-plc-programming-tool-allows-remo..
