Security Alerts & News
by Tymoteusz A. Góral

History
#1440 Wordpress urges users to update now to fix critical security holes
Wordpress is urging webmasters to update their CMS packages as quickly as possible to protect their domains from critical vulnerability exploits.

On Thursday, the content management system (CMS) provider released a security advisory alongside the latest version of Wordpress, 4.6.1. Now available, the update patches two serious security problems, a cross-site scripting vulnerability and a path traversal security flaw.

The XSS flaw, discovered by SumOfPwn researcher Cengiz Han back in July at the Summer of Pwnage bug bounty project, allows attackers to use a crafted image file, upload to Wordpress, and inject malicious JavaScript code into the software.
Read more
#1449 Critical MySQL vulnerability disclosed
#1448 Fire drill knocks ING bank's data centre offline
#1447 Cisco’s network bugs are front and center in bankruptcy fight
#1446 Now you can buy a USB stick that destroys anything in its path
#1445 Two critical bugs and more malicious apps make for a bad week for Android
#1444 Re-thinking security fundamentals: How to move beyond the FUD
#1443 Blue light has a dark side
#1442 Cryptocurrency mining malware discovered targeting Seagate NAS hard drives
#1441 MalwareMustDie spotted a new ELF trojan backdoor, which is now targeting IoT devices
#1440 Wordpress urges users to update now to fix critical security holes
#1439 Picture perfect: CryLocker ransomware uploads user information as PNG files
History
2017: 01 02 03 04 05
2016: 01 02 03 04 05 06 07 08 09 10 11 12