Beware Apple users! Your iPhone can be hacked just by visiting an innocent-looking website, confirms a terrifying report Google researchers released earlier today. The story goes back to a widespread iPhone hacking campaign that cybersecurity […]
MIT Boffins Create NanoTube RISC Processor
Those scientists at MIT have been very busy bees. With the world burning around us, they thought we’d need new technology to speed up the destruction. They’ve brought it to us in the form of […]
Cisco 220 Series Public Exploit Available
Cisco warns that public exploits for vulnerabilities to its Cisco 220 Series smart switches are available and should be upgraded to firmware release 1.1.4.4 as soon as possible. See more: Cisco 220 Series Smart Switches […]
Researcher Discloses Second Steam Zero-Day After Valve Bug Bounty Ban
More Woes for Valve after they banned a security researcher from its bug bounty program, the same researcher discovers another zero-day vulnerability affecting the Steam gaming client. Source: Researcher Discloses Second Steam Zero-Day After Valve […]
DejaBlue: Analyzing a RDP Heap Overflow
Check out this interesting piece looking into the latest RDP bugs (CVE-2019-1181 & CVE-2019-1182) patched by Microsoft in August. Read More: DejaBlue
VLC Media Player Allows Desktop Takeover Via Malicious Video Files
VideoLAN has released an updated version of its VLC Player to fix over a dozen bugs. Source: VLC Media Player Allows Desktop Takeover Via Malicious Video Files
Threat Roundup for August 9 to August 16
Talos is publishing a glimpse into the most prevalent threats we’ve observed between Aug. 9 and Aug. 16. As with previous roundups, this post isn’t meant to be an in-depth analysis. Instead, this post will […]
Python Tool Leveraging Rapid7’s Open Data OSINT Dataset
Over on James Sawyer’s github repos you’ll find a neat set of Python utilities that leverage the Rapid7 OSINT dataset. The Rapid7 Open Data set is a collection of Open Source Intelligence data feeds collected […]
Sploitus.com: Exploit Search Database
Anton Lopanitsyn, a security research using the moniker Bo0om, has provided an exploit database search facility which is called sploitus.com. It seems to be receive fairly up to date exploit data. Anton seems to be […]
New Bluetooth Vulnerability Allows Attackers to Intercept Traffic
Double entendres abound with the KNOB (key negotiation of Bluetooth) attack against the basic rate/enhanced data rate (BR/EDR, or Bluetooth Classic) configuration, which could result in information disclosure and/or escalation of privileges. Source: New Bluetooth […]
