New IE Zero-Day Found in Watering Hole Attack

Thursday, February 13th, 2014

FireEye Labs has identified a new Internet Explorer (IE) zero-day exploit hosted on a breached website based in the U.S. It’s a brand new zero-day that targets IE 10 users visiting the compromised website–a classic drive-by download attack. Upon successful exploitation, this zero-day attack will download a XOR encoded payload ...

Private photos exposed in Instagram hack

Tuesday, February 11th, 2014

Private profiles of Instagram users could be made public as a result of a vulnerability that took almost six months to fix. The flaw would have enabled hackers to change privacy settings within user profiles to expose potentially sensitive photos to the internet, or to lock down popular pages by marking ...

Cybercriminals compromise home routers to attack online banking users

Friday, February 7th, 2014

Attacks recently observed in Poland involved cybercriminals hacking into home routers and changing their DNS settings so they can intercept user connections to online banking sites. Researchers from the Polish Computer Emergency Response Team (CERT Polska) believe attackers will likely target users from other countries as well in the future using ...

Comcast web mail servers hacked, all users at risk

Thursday, February 6th, 2014

Hacking group NullCrew FTS declared today that it had exploited a security flaw in Comcast’s Zimbra webmail server. It’s believed that the group used what is known as a LFI exploit or local file inclusion vulnerability to obtain usernames and passwords of Comcast ISP users. The hacking group claims it used ...

Adobe releases patch for Flash zero-day

Wednesday, February 5th, 2014

Adobe has released a fix for a zero-day vulnerability in Flash Player, which impacts users running Windows, Mac and Linux operating systems. On Tuesday, the company made the updates available via a security bulletin, urging Windows and Mac users to download Flash Player versions 12.0.0.44 and 11.7.700.261 (for those who cannot ...