Russian Electronic Voting System Struck by 19 DDoS Attacks in One Day
Yandex, the Russian technology and search engine powerhouse, disclosed last week that it had been hit by one of the...
FTC: Health App and Device Makers Should Comply With Health Breach Notification Rule
The Federal Trade Commission on 15th September authorized a policy statement reminding makers of health applications and linked devices that...
AES256_Passwd_Store – Secure Open-Source Password Manager
This script securely encrypts or decrypts passwords on disk within a custom database file. It also features functionality to retrieve...
DirSearch – A Go Implementation Of Dirsearch
This software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first...
Conti Ransomware Victim: Marans_Weisz_Newman_LLC
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
Flaws in Nagios Network Management systems pose risk to companies
Researchers found multiple flaws in widely used network management products from Nagios that pose serious risk to organizations. Researchers from...
VMware addressed a critical flaw in vCenter Server. Patch it now!
VMware addressed a critical arbitrary file upload vulnerability that affects the default configuration of vCenter Server 6.7 and 7.0 deployments....
A zero-day flaw allows to run arbitrary commands on macOS systems
Security researchers disclosed a new zero-day flaw in Apple’s macOS Finder that can allow attackers to run arbitrary commands on...
Turla APT group used a new backdoor in attacks against Afghanistan, Germany and the US
Russia-linked cyber espionage group Turla made the headlines again, the APT has employed a new backdoor in a recent wave...
CVE-2017-3100
Summary: Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData...
CVE-2017-3085
Summary: Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing...
CVE-2017-3106
Summary: Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation...
CVE-2017-11292
Summary: Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value...
CVE-2017-11305
Summary: A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings...
Conti Ransomware Victim: NASCO_Industries
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
Conti Ransomware Victim: PowerGrid_Services
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
Internet safety tips for kids and teens: A comprehensive guide for the modern parent
When it comes to picking a new device for your child, it’s often difficult to know where to start. Whether...
New Mac malware masquerades as iTerm2, Remote Desktop and other apps
Last week, security researcher Patrick Wardle released details of a new piece of malware masquerading as the legitimate app iTerm2....
35 yrs Of Imprisonment for the Administrator of 200,000 DDoS Attacks
After a 9-day trial, a California jury that held two distributed denial of service (DDoS) operations administrators, found him guilty....
Pakistani Scammer Sentenced to 12 Years in $200 Million Phone-Fraud Scheme
AT&T, the world’s largest telecommunications firm, lost over $200 million after a Pakistani scammer and his partners coordinated a seven-year...
Payment API Flaws Exposed Millions of Users’ Data
Researchers discovered API security flaws impacting several apps, potentially exposing the personal and financial information of millions of consumers. According to...
$100 Million Pledged by Google to Groups that Manage Open-Source Projects
Google recently announced a $100 million donation to organizations that manage open-source security priorities and assist with vulnerability fixes, and...
Detection evasion in CLR and tips on how to detect such attacks
In terms of costs, the age-old battle that pits attacker versus defender has become very one sided in recent years....
PyHook – An Offensive API Hooking Tool Written In Python Designed To Catch Various Credentials Within The API Call
PyHook is the python implementation of my SharpHook project, It uses various API hooks in order to give us the...
