NVD Down Due To Malware
Ironically, the US National Vulnerability Database is down due to malware on the servers. The NVD serves as a tool that allow system administrators to identify potential problem with operating systems...
View ArticleAndroid Malware Delivered Via Stego
Help Net Security is reporting that malware can be delivered to an Android device via steganographic techniques. The exploit works by disguising the malware in an encrypted image file. Some obfuscated...
View ArticleDid the DEA go too far?
Sondra Arquiett was busted for possession of cocaine. She pled guilty and received probation. She later discovered that the DEA opened a Facebook account in her name and was impersonating her online....
View ArticleWindows Zero Day
Microsoft has published an advisory for a Windows 0 day exploit. The exploit is related to the Object Linking and Embedding (OLE) functionality in Windows. OLE functions allow files or data from one...
View ArticleUber’s Privacy Problem
Uber recently blogged about their privacy policy. They claim to use the info they collect for a limited set of legitimate business purposes. When installing the Uber app on Android, the app requests...
View ArticleClock Runs Out on Microsoft Zero Day
Microsoft failed to patch a zero day exploit before the automatic 90 day clock ran out. A research submitted a privilege escalation vulnerability in Windows 8.1 to Google’s Project Zero. The bug allows...
View ArticleMoonpig API Exposes Customer Info
Security researcher Paul Price discovered a flaw in the API used by UK greeting card company Moonpig. Their API does not require authentication and exposes customer account details. He notified them...
View ArticleObama Proposes 30 Day Hack Notification
President Obama is pushing new legislation called the Personal Data Notification and Protection Act. This law, if enacted, will standardize the consumer notification requirements in the event of data...
View Article
