Thousands of Seagate Network Attached Storage (NAS) devices are defenseless against a zero-day remote code execution (RCE) vulnerability. Back in October, security researcher OJ Reeves attempted to... read more
Cops snare alleged Lizard Squad member blamed for hacks on Pentagon during nationwide cyber-crime clampdown
Submitted by l33tdawg on Fri, 2015-03-06 14:26
British cops have arrested a 23-year-old man on suspicion of hacking into the US Department of Defense.
The National Crime Agency snared a suspected Lizard Squad hacker on Wednesday in Sutton Coldfield, West Midlands, during a week-long "intensive" national operation against alleged cyber-criminals.
The C99Shell PHP backdoor lives on
Submitted by l33tdawg on Fri, 2015-03-06 14:25
The C99Shell PHP backdoor, originally spotted in 2007, is still around, and is still a danger to both web server operators and end-users.
After getting a tip from a designer about a hacked Joomla page, Panda Security malware researcher Bart Blaze discovered that a newer version (2.1) of this scripted web application Trojan has been used to compromise a web server.
The same server has been infected with other PHP backdoors, one of which seems designed to specifically target mobile users.
Microsoft delivers first public preview of Office 2016 for Mac
Submitted by l33tdawg on Fri, 2015-03-06 14:21
Five years after rolling out Office 2011 for Mac, Microsoft has made a first public preview of its successor, Office 2016 for Mac, available to testers for download.
Microsoft already has updated OneNote and Outlook (available in limited preview form) available for the Mac. Today, March 5, the company is delivering refreshed public previews of those two apps in addition to the first public previews of the 2016 versions of Word, Excel and PowerPoint, and is making all five apps available to anyone running Yosemite (Mac OS 10.10).
Adobe launches cashless bug bounty
Submitted by l33tdawg on Fri, 2015-03-06 09:18
Adobe has launched a bug bounty program that hands out high-fives, not cash.
The web application vulnerability disclosure program announced today and launched last month operates through HackerOne used by the likes of Twitter, Yahoo!, and CloudFlare, some of which provide cash or other rewards to those who disclose security messes.
HTTPS security flaw FREAK plagues Windows too
Submitted by l33tdawg on Fri, 2015-03-06 09:16
Windows systems are vulnerable to FREAK, a decade-old bug that was discovered only this week affecting Android and Apple devices.
FREAK — short for Factoring attack on RSA-EXPORT Keys — allows hackers to decrypt HTTPS-protected Web traffic between browsers and millions of websites. Microsoft confirmed that Windows could be compromised the same way as Android, BlackBerry, iOS and OS X devices in an advisory published today.