Category Archives: Vulnerabilities & attacks
OpenSSL Fixed a Critical Vulnerability
This week OpenSSL Fixed a Critical Vulnerability, the new security vulnerability discovered in OpenSSL. CVE-2015-1793 is due to a problem with authentication certificate processing which may lead to MITM man in the middle attack. OpenSSL Foundation released the patch to
iOS Vulnerability Leads to Endless Reboots
Over this week and on the RSA conference security researchers from Skycure company discovered a new iOS vulnerability, this bug have been accidentally found during a network penetration testing. The security team have installed a router and connected the smartphone
Critical Microsoft HTTP.sys Remote Code Execution Vulnerability
Microsoft have released over this week several security patches that comes to fix critical security vulnerabilities. One of these vulnerabilities is an HTTP.sys security issue that do not properly handle HTTP-requests and may lead to DoS or remote code execution.
New release for OpenSSL to fix several security vulnerabilities
Heartbleed OpenSSL security vulnerability is still not the last vulnerability we see for OpenSSL but we continue to find new and critical security issues in OpenSSL library. New security advisory have been published that include several high severity vulnerabilities that
Firefox 36.0.1 Released
New security update have been released by Mozilla Firefox 36.0.1, the list of patches include fix for nine security vulnerabilities. While users may apply the security update automatically from the browser update. Updates will fix the following: 36.0.1 – Disable
Adobe critical zero day vulnerability to patch
Adobe has released over this week security updates to fix critical vulnerabilities in Adobe Flash. The patches are going to address 18 vulnerabilities 15 of them allows remote code execution. CVE 2015-0313 is actively used by attackers to compromise systems
GHOST a 14 year old vulnerability in Linux
New vulnerability have been discovered by Qualys security researchers called GHOST that affect Linux based systems in the glibc-2.2 (GNU C Library) since 2000. Ghost allow attacker to control a system without having any credentials. The vulnerability may exist on
