Apple finally patches musty old Java for Mac vulnerabilities
Ryan Naraine: Apple has finally released a Java for Mac update to fix multiple security flaws that were patched upstream more than six months ago. The fix comes three weeks after developers released proof-of-concept code to demonstrate the severity of the flaw and to nudge embarrass Apple into shipping the patch. Today’s patch covers the following: [ SEE: Mac OS [...]
Mon Jun 15 14:05:47 PDT 2009
Coming in July: Month of Twitter Bugs
Ryan Naraine: A well-known security researcher plans to use the month of July to expose serious vulnerabilities in the Twitter ecosystem. The Month of Twitter Bugs, a project which launches on July 1, is the handiwork of Aviv Raff (left), a researcher known for his work on Web-based security issues.? Raff, who previously warned that the Twitter API [...]
Mon Jun 15 11:00:24 PDT 2009
Iranian opposition launches organized cyber attack against pro-Ahmadinejad sites
Dancho Danchev: Approximately 24 hours ago, the Iranian oposition coordinated an ongoing cyber attack that has successfully managed to disrupt access to major pro-Ahmadinejad Iranian web sites, including the President’s homepage which continues returning a “The maximum number of user? reached, Server is too busy, please try again later…” message. Through a combination of DIY (do it yourself) [...]
Mon Jun 15 08:19:15 PDT 2009
China confirms security flaws in Green Dam, rushes to release a patch
Dancho Danchev: China’s Ministry of Industry and Information Technology has instructed the developers of the Green Dam censorware, to briefly release a patch in regard to last week’s published analysis detailing the possibility of remotely exploitable vulnerabilities within the software. Jinhui Computer System Engineering Co, developer of Green Dam, insisted that the software is just a vulnerable as [...]
Mon Jun 15 02:09:54 PDT 2009
Researchers demo wireless keyboard sniffer for Microsoft 27Mhz keyboards
Dancho Danchev: Researchers from Remote-Exploit.org, the home of the BackTrack pen-testing Linux distribution, have recently released an open source wireless keyboard sniffer Keykeriki, capable of sniffing and decoding keystrokes of Microsoft 27Mhz based keyboards through on-the-fly deciphering of XOR based encryption. Their wartyping — decoding signals from wireless keyboards — proof of concept is based on a research [...]
Fri Jun 12 10:28:11 PDT 2009
Mozilla slaps band-aid on 11 Firefox flaws
Ryan Naraine: Mozilla has joined this week’s patchapalooza with the release of a Firefox update to fix 11 documented security vulnerabilities. Six of the 11 issues are in advisories rated “critical” because of the risk of code execution attacks that could allow hackers to take complete control of a compromised machine. Here’s a snapshot of the critical issues: MFSA [...]
Fri Jun 12 06:35:23 PDT 2009
No comments:
Post a Comment