Web Security Archives | Page 2 of 133

Articles targeted at Web App Security, hacks, guides, how to’s and the latest vulnerabilities.

Black Hat 2020: In a Turnaround, Voting Machine Vendor Embraces Ethical Hackers

5th August 2020Lindsey O Donnell

Voting machine technology seller Election Systems & Software (ES&S) offered an olive branch to security researchers with new safe harbor terms and vulnerability [...]

Microsoft Teams Patch Bypass Allows RCE

5th August 2020Tara Seals

An attacker can hide amidst legitimate traffic in the application’s update function. Source: Threat Post – Web Security – Microsoft Teams Patch [...]

Newsletter WordPress Plugin Opens Door to Site Takeover

4th August 2020Tara Seals

An XSS bug and a PHP object-injection vulnerability are present in a plugin used by hundreds of thousands of websites. Source: Threat [...]

2020 in Security: Four Stories from the New Threat Landscape

4th August 2020Pat Cooper

Special Report eBook on new work-from-home cybersecurity challenges. Source: Threat Post – Web Security – 2020 in Security: Four Stories from the [...]

Twitter Could Face $250M FTC Fine Over Improper Data Use

4th August 2020Lindsey O Donnell

The potential FTC fine comes after Twitter last year acknowledged that user emails and phone numbers were being used for targeted advertising. [...]

Apple Knocked Off Perch as Most Imitated Brand for Phishing Attacks

4th August 2020Elizabeth Montalbano

COVID-19 pandemic spurs spoofing preference changes, plus a surge in email-based attacks. Source: Threat Post – Web Security – Apple Knocked Off [...]

Google Updates Ad Policies to Counter Influence Campaigns, Extortion

3rd August 2020Tara Seals

Starting Sept. 1, Google will crack down on misinformation, a lack of transparency and the ability to amplify or circulate politically influential content. [...]

Netgear Won’t Patch 45 Router Models Vulnerable to Serious Flaw

3rd August 2020Lindsey O Donnell

Almost two months after a high-severity flaw was disclosed – and seven months after it was first reported – Netgear has yet to [...]

Meetup Critical Flaws Allow ‘Group’ Takeover, Payment Theft

3rd August 2020Lindsey O Donnell

Researchers disclosed critical flaws in the popular Meetup service at Black Hat USA 2020 this week, which could allow takeover of Meetup “Groups.” [...]

4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users

31st July 2020Tara Seals

The flaws have been confirmed by Grandstream, but no firmware update has yet been issued. Source: Threat Post – Web Security – [...]