Mac security researcher Pedro Vilaca has discovered a flaw in Apple computers that leaves them vulnerable to a remote hack. Vilaca discovered when a Mac goes to sleep and wakes back up again, the programme that gets the computer system started can be …
mac hacker – read more
Attackers can potentially snoop on the encrypted traffic of over 25,000 iOS applications due to a vulnerability in a popular open-source networking library.
The vulnerability stems from a failure to validate the domain names of digital certificates in AFNetworking, a library used by a large number of iOS and Mac OS X app developers to implement Web communications—including those over HTTPS (HTTP with SSL/TLS encryption).
The flaw allows attackers in a position to intercept HTTPS traffic between a vulnerable application and a Web service to decrypt it by presenting the application with a digital certificate for a different domain name. Such man-in-the-middle attacks can be launched over insecure wireless networks, by hacking into routers or through other methods.
To read this article in full or to leave a comment, please click here
SAP patched a flaw on Thursday that could allow an attacker to take complete control over a database, according to security vendor Trustwave.
The flaw (CVE-2014-6284) affects SAP’s Adaptive Server Enterprise (ASE), a relational database for Unix, Linux and Windows systems, designed for high volumes of data-rich transactions. Vulnerable versions are 12.5, 15, 15.5, 15.7 and 16.
TrustWave’s Martin Rakhmanov, a senior security researcher, found an error in the challenge and response mechanism used to access ASE. The account access gained is not a privileged account, but TrustWave said other flaws allow the privileges to be escalated to that of a database administrator.
To read this article in full or to leave a comment, please click here
The Inquisitr |
Internet Security Guru Points Out United Airlines Security Flaw, Thanked With …
The Inquisitr A top internet security expert, Chris Roberts, was on a United Airlines flight when he noticed a flaw in the airline's security system. The computer expert then took to Twitter to joke about the potential issue with the plane's Wi-Fi system, but … |