|
Android adware that MUST NOT BE NAMED threatens MILLIONS
Register A popular mobile ad library used by multiple Android apps poses a severe malware threat, researchers at infosec firm FireEye have warned. The security researchers said that altogether 200 million affected apps had been downloaded. This ad library … |
|
Software Flaw Threatens LG Android Smartphones
InformationWeek SMB (blog) In particular, the agency accused HTC of insecurely implementing two logging applications — Carrier IQ and HTC Loggers — installed by default on all of its devices, as well as committing programming errors that undermined the Android security model. |
Hundreds of thousands of websites are potentially at risk following the discovery of an extremely critical vulnerability in the Ruby on Rails framework that gives remote attackers the ability to execute malicious code on the underlying servers.
The bug is present in Rails versions spanning the past six years and in default configurations gives hackers a simple and reliable way to pilfer database contents, run system commands, and cause websites to crash, according to Ben Murphy, one of the developers who has confirmed the vulnerability. As of last week, the framework was used by more than 240,000 websites, including Github, Hulu, and Basecamp, underscoring the seriousness of the threat.
“It is quite bad,” Murphy told Ars. “An attack can send a request to any Ruby on Rails sever and then execute arbitrary commands. Even though it’s complex, it’s reliable, so it will work 100 percent of the time.”
Read 3 remaining paragraphs | Comments
|
New Destructive Narilam Malware Threatens Targets In The Middle East
Techtree.com An analysis of the malware has shown that it is not similar to previous threats such as Duqu, Stuxnet, Flame, and Gauss. What is known is that it has targeted databases with specific names: Maliran, Amin, and Shahd, all products of an Iranian software … Is Narilam Malware Something to Worry About? |
