Data Exposed in OXO, Amazon and MongoDB Leaks
Dual data exposures and a wide-scale data leak due to a vulnerable MongoDB database have kicked off 2019 so far.
Source: Threat
[...]
Web Security
Articles targeted at Web App Security, hacks, guides, how to’s and the latest vulnerabilities.
U.S. Government Shutdown Leaves Dozens of .Gov Websites Vulnerable
As the shutdown continues into its 21st day, dozens of .gov websites haven’t renewed their TLS certificates.
Source: Threat Post – Web
[...]
Yet Another Bypass: Is 2FA Broken? Authentication Experts Weigh In
A penetration testing tool called Modlishka can defeat two-factor authentication in the latest 2FA security issue. We asked a roundtable of experts what
[...]
‘Unprecedented’ DNS Hijacking Attacks Linked to Iran
The attacks, targeting several countries to redirect traffic and harvest credentials, have been linked to Iran.
Source: Threat Post – Web Security
[...]
Google Search Results Spoofed to Create Fake News
The technique can be used to spread disinformation while leveraging the trust people have in Google’s search results.
Source: Threat Post –
[...]
Critical Flaw in Cisco’s Email Security Appliance Enables ‘Permanent DoS’
A remote attacker could exploit the vulnerability simply by sending an email.
Source: Threat Post – Web Security – Critical Flaw in
[...]
Google Play Boots 85 Malicious Adware Apps
Once downloaded, the fake apps hide themselves on the victim’s device and continue to show a full-screen ad every 15 minutes.
Source:
[...]
ThreatList: WordPress Vulnerabilities Tripled in 2018
Despite fewer plugins being added to WordPress last year, the CMS saw an astounding tripling of vulnerabilities in its platform in 2018.
[...]
Adobe Patches Important Bugs in Connect and Digital Edition
The update comes on the heels of critical fixes in an unscheduled patch last week.
Source: Threat Post – Web Security –
[...]
ThreatList: Container Security Lags Amidst DevOps Enthusiasm
Security incidents are set to grow as companies lag behind in securing their containers.
Source: Threat Post – Web Security – ThreatList:
[...]