Tag Archive for: Within

Zero-day vulnerability found within MySQL database application – ZDNet


ZDNet

Zero-day vulnerability found within MySQL database application
ZDNet
zero-day-flaw-mysql-zdnet.jpg Symantec. A researcher has disclosed a zero-day flaw in the widely-used MySQL database application after Oracle reportedly failed to patch the critical security hole. On Monday, independent security researcher Dawid
MySQL zero-day exploit puts some servers at risk of hackingInfoWorld
A Critical MySQL Zero-Day Vulnerability UncoveredVirus Guides (blog)
MySQL Zero-Day Allows An Attacker To Take Full Control Of DatabaseTechworm
The Tech Portal –Softpedia News –Dawid Golunski –Hacker News
all 21 news articles »

“zero day” – read more

Drone flies within 30 feet of passenger jet landing at Heathrow

Part of a report of a September near-miss between an Airbus passenger jet and a “helicopter drone” very close to Heathrow. (credit: UK Airprox Board)

File this under the category of “drone pilots trying to ruin it for everybody.” According to a safety incident report published by the United Kingdom’s Airprox air safety board, an Airbus A319 landing at Heathrow International Airport last September narrowly avoided a collision with a drone flying at an altitude of 500 feet as the jet was on its final approach. The pilots reported the small hovering helicopter-style drone passed about 25 yards to the left of the cockpit and just 20 feet above the aircraft.

The A319’s wingspan is 112 feet, so that would mean the drone missed the airliner by as little as 30 feet. The pilot reported that there was no time once the drone was sighted to take evasive action. The pilot reported the drone to air traffic controllers, and the police were dispatched. However, the drone pilot was not found. The incident was classified as meeting risk category A—the highest level of incident covered by the reporting system short of an actual collision.

The drone was not detected by air traffic control radar, so the only details of the event and how close the aircraft came to striking the drone are the pilot’s estimate of distance. In the UK, drones are limited to flight below 400 feet and are banned from flying in controlled airspace (like that around Heathrow) without permission from air traffic controllers. As the report noted, UK Civil Aviation Authority rules require a drone to stay within visual line of sight of the pilot—a maximum of 500 meters (1,640 feet) horizontally and 400 feet vertically from the operator.

Read 2 remaining paragraphs | Comments

Technology Lab – Ars Technica

Samsung will stop blocking Microsoft software updates ‘within a few days’

Owners of Samsung PCs will begin receiving automatic software updates from Microsoft again soon, after Samsung said it will end its practice of blocking automatic Windows Updates on its computers.

“We will be issuing a patch through the Samsung Software Update notification process to revert back to the recommended automatic Windows Update settings within a few days,” Samsung said Friday.

It said it was committed to providing “a trustworthy user experience” and that it values its partnership with Microsoft.

It’s a quick turnaround from earlier this week, when researcher Patrick Barker reported on an auspiciously named application called “Disable_Windowsupdate.exe” that runs on Samsung PCs as part of the company’s SW Update service. As its name implies, the program disables automatic updates from Microsoft’s software patching service, and requires people to manually install individual patches if they want to update their PC.

To read this article in full or to leave a comment, please click here

Network World Security

Watching a ‘Swatting’ slowly unfold within sight of the Boston Marathon starting line

Approaching the center of town to pick up pizza last night, I saw a half-dozen police vehicles blocking off Main Street. I pulled into a parking lot both to figure out how to get to our dinner and to find out what was going on.

The instant a bystander told me what he had heard, I knew this police operation was almost certainly the result of a hoax known as Swatting, which starts with a fake 911 call reporting a non-existent life-threatening situation. It’s become an epidemic of late, targeting celebrities and online gamers, in particular.

While police had no choice but to take the threat seriously – more on that in a minute — I was confident this was a hoax for two reasons: I have been reporting on the topic recently and the rumored details of the 911 call seemed far-fetched: a man claimed to be holed up in the closed Hopkinton Public Library with two hostages and a bomb. (Not only did I believe this was a Swatting, I said it out loud, so the editor of a local news site called HopNews decided I was worth interviewing.)

To read this article in full or to leave a comment, please click here

Network World Paul McNamara