SecurityWeek

Olga Redmon is an attractive young professional whose resume includes experience in customer service and Microsoft Office. Her LinkedIn profile boasts 500+ connections and dozens of endorsements, all of which come from Midwestern professionals in the automotive industry. Olga’s profile picture depicts her in a tight black tank top and red lipstick.

vBulletin users who still use the vBSEO search engine optimization plugin are advised to either uninstall it or apply a patch because the software is plagued by a serious vulnerability.

Aviator, the Web browser developed by WhiteHat Security with security and privacy in mind, is is not as secure as it should be, Google engineers pointed out last week.

In late November, Sony Pictures Entertainment was hacked by a group calling itself Guardians of the Peace (GOP). What initially appeared to be another hacktivist attack, later turned out to be a sophisticated operation possibly orchestrated by a state actor.

Researchers have uncovered a DOM-based self-XSS (cross-site scripting) flaw in Microsoft’s Dynamics CRM customer relationship management solution, but the company says it doesn’t consider such issues to be security vulnerabilities.

My sister is a PHD and an RN who’s spent a 20-year career in healthcare, but she doesn't give shots or dress wounds. Even though she’s spent considerable time assisting in many heart transplants and trauma surgeries, her day-to-day duties over the last decade or so involve things like data modeling, collection, standardization, analysis and reporting.

A vulnerability has been identified in a library utilized by many manufacturing and technology companies for HART-based field devices used by industrial control systems (ICS) operators.

Many ASUS wireless routers are affected by a vulnerability that can be exploited by an attacker with access to the target’s local area network (LAN) to execute arbitrary commands.The security hole was uncovered by Joshua Drake, practice manager of Accuvant Labs’ research and development department. The flaw has been assigned the CVE identifier CVE-2014-9583.

Microsoft No Longer Making Patch Tuesday Advanced Notification Available for General Public Microsoft has decided to ditch its tradition of publicly publishing information about upcoming patches the Thursday before Patch Tuesday.

Several patches have been released today to plug eight vulnerabilities in OpenSSL. The fixes are contained within OpenSSL 1.0.1k, 1.0.0p and 0.98zd. The most serious of the bugs are classified by the OpenSSL Project as 'moderate' and could be leveraged to launch denial-of-service attacks. The remaining six issues are ranked 'low'.

Researchers at F-Secure have been been monitoring the CosmicDuke, MiniDuke and OnionDuke cyber espionage campaigns and they’ve made some interesting discoveries.

Cybercrooks have been distributing a Bitcoin mining malware with the aid of a cracked version of the Andromeda bot, Fortinet researchers reported on Wednesday.Andromeda, one of the most well-known botnets, is currently at version 2.09. However, older versions can still prove to be useful, as researchers have discovered.

Researchers at Trend Micro have identified a vulnerability related to the Android manifest file that can be exploited to cause devices to crash.

Geneva - Swiss bank BCGE said Thursday hackers had stolen the personal data of thousands of clients as a newspaper reported it was being blackmailed. The Banque Cantonale de Geneve said the theft had affected several thousand of its estimated 240,000 clients but that there had been "no financial damage."