January 2018 - Securezoo Blog

Oracle MICROS POS vulnerability

Post author:Frank Crast
Post published:January 31, 2018
Post category:Vulnerabilities & Exploits
Post comments:0 Comments

Security researchers from ERPScan discovered a high severity vulnerability in MICROS point-of-sale (POS) terminals that could allow hackers to read sensitive data.

Fitness app users could expose military bases

Post author:Frank Crast
Post published:January 29, 2018
Post category:Application Security / Mobile Security
Post comments:0 Comments

Fitness app and social media company Strava has introduced a Global Heatmap service, that may have allowed many service people to inadvertently expose the locations of their military bases.

Malvertising campaign delivers cryptocurrency miners

Post author:Frank Crast
Post published:January 26, 2018
Post category:Cybersecurity Attacks / Malware
Post comments:0 Comments

Cyber criminals are abusing Google's DoubleClick service to deliver a Coinhive cryptocurrency miner as part of a malicious campaign.

US Media twitter accounts attacked

Post author:Frank Crast
Post published:January 26, 2018
Post category:Cybercrime / Cybersecurity Attacks / Phishing
Post comments:0 Comments

A large attack campaign that has targeted high-profile, verified Twitter accounts with the purpose of spreading Turkish political propaganda.

Skype, Slack and other apps vulnerable to Electron framework bug

Post author:Frank Crast
Post published:January 25, 2018
Post category:Application Security / Vulnerabilities & Exploits
Post comments:0 Comments

Hundreds of popular software applications that are developed using the Electron framework may be vulnerable to remote execution flaws.

PCI security standards for mobile point of sale

Post author:Frank Crast
Post published:January 25, 2018
Post category:Mobile Security / Standards & Guidelines
Post comments:0 Comments

The PCI Security Standards Council (PCI SSC) announced a new PCI Security Standard for software-based PIN entry on commercial off-the-shelf devices (COTS), to include smartphones and tablets.

WordPress plugin vulnerability fixed

Post author:Frank Crast
Post published:January 24, 2018
Post category:Messaging Security / Vulnerabilities & Exploits
Post comments:0 Comments

A popular WordPress plugin 'Email Subscribers & Newsletters' was found to have a vulnerability that could allow an unauthenticated attacker to download subscriber lists on over 100,000 WordPress websites.

Intel issues new Spectre/Meltdown patch guidance

Post author:Frank Crast
Post published:January 23, 2018
Post category:Security Updates & Patches
Post comments:0 Comments

Intel said the root cause of the reboot issues have been identified. To that end, the company said customers and partners should not install its current versions of Spectre/Meltdown patches rolled out earlier this month as they "may introduce higher than expected reboots and other unpredictable system behavior."

New Dridex malware campaign uses FTP sites

Post author:Frank Crast
Post published:January 22, 2018
Post category:Cybersecurity Attacks / Malware
Post comments:0 Comments

Security researchers have spotted a new email campaign last week that is distributing a new variant of the Dridex banking trojan.

Gemalto vulnerabilities could expose ICS

Post author:Frank Crast
Post published:January 22, 2018
Post category:Vulnerabilities & Exploits
Post comments:0 Comments

Security researchers discovered 14 vulnerabilities in Gemalto Sentinel LDK tool that can expose Industrial Control Systems (ICS) and corporate systems to remote attacks if unpatched. The Sentinel tool is used by many organizations on…