Tag Archive for: Affect

Flaw in WordPress caching plug-in could affect over 1 million sites

A vulnerability in the popular WP Super Cache plug-in for WordPress could allow attackers to inject malicious scripts into websites. The scripts, when loaded by administrators, could trigger unauthorized actions.

WordPress websites are a popular target for hackers and many of them are compromised due to plug-in vulnerabilities. Just on Tuesday, the FBI warned that attackers sympathetic to the extremist group ISIS — also known as ISIL — have defaced many websites by exploiting known vulnerabilities in WordPress plug-ins.

The persistent cross-site scripting (XSS) flaw in WP Super Cache can be exploited by sending a specifically crafted query to a WordPress website with the plug-in installed, according to Marc-Alexandre Montpas, a senior vulnerability researcher at Web security firm Sucuri.

To read this article in full or to leave a comment, please click here

Network World Security

How will iPhone 6’s Wi-Fi calling, VoLTE affect enterprise networks?

While the cosmetic features like screen size and processing power of Apple’s new iPhone 6 and 6 Plus attracted the most attention, their use of Wi-Fi and Voice over LTE (VoLTE) for voice and video calling could eventually have a major impact on how phone calls are handled in the enterprise.

On its website, Apple touts the iPhone’s Wi-Fi voice and video calling feature as a good solution “when you don’t have a good cellular signal.” As this helpful Gizmodo guide to Wi-Fi calling points out, Wi-Fi calling could help users save money by using an internet connection instead of a carrier’s network, and unlike other services like Skype and Google Voice, users can make and receive calls with the same phone number they use for traditional phone calls. This makes it helpful for employees visiting clients’ offices or attending large events, relying on the available Wi-Fi networks to make calls and send text messages without running up their wireless bills.

To read this article in full or to leave a comment, please click here

Network World Colin Neagle

Bluebox reveals Android security hole, may affect 99 percent of devices – Engadget


Apple Insider

Bluebox reveals Android security hole, may affect 99 percent of devices
Engadget
Researchers at Bluebox Security have revealed a disturbing flaw in Android's security model, which the group claims may affect up to 99 percent of Android devices in existence. According to Bluebox, this vulnerability has existed since Android 1.6
Security firm claims 99 percent of Android apps open to takeoverZDNet (blog)
Security flaw opens all modern Android devices to "zombie botnet" takeoverApple Insider
Android flaw allows hackers to alter appsITWorld Canada
Ars Technica –Computerworld
all 19 news articles »

“android security” – read more

Researchers find Android hole that could affect millions – FierceMobileIT

Researchers find Android hole that could affect millions
FierceMobileIT
Android security concerns were heightened last week by North Carolina State University researchers who showed how a vulnerability in Android platforms could be used to send fake SMS messages designed to trick the user into disclosing confidential

and more »

“android security” – read more