AMX, a provider of audio-visual conferencing gear used in sensitive government and military locations, has removed a “deliberate” backdoor in one of its central controller system products.
Tag Archives: Web Security
Threatpost News Wrap, January 22, 2016
Mike Mimoso and Chris Brook discuss the week in news, including the Linux zero day–how it was patched in Android, Twitter users who are still looking for answers, and bot fraud.
Google Challenges Number of Android Devices Affected by Linux Flaw
Google has patched Android against a critical Linux kernel vulnerability, and said the number of affected Android devices has been exaggerated.
HD Moore To Build New Venture Capital Firm
Metasploit creator HD Moore announced he’s leaving Rapid7 at the end of the month for a new venture capital opportunity.
Apple Releases Patches for iOS, OS X and Safari
Apple released security updates for iOS, OS X and Safari, patching a number of kernel-level code-execution vulnerabilities.
Critical Yahoo Mail Flaw Patched, $10K Bounty Paid
A researcher earned a $10,000 bounty from Yahoo for a stored cross-site scripting vulnerability in Yahoo Mail.
Serious Linux Kernel Vulnerability Patched
The Linux security team today patched a critical privilege escalation vulnerability in the Linux kernel discovered by startup Perception Point.
LastPass Mitigates Newly Disclosed Phishing Attack
LastPass has mitigated the effects of a new phishing attack presented this weekend at ShmooCon.
Apple’s ‘Targeted’ Gatekeeper Bypass Patch Leaves OS X Users Exposed
Two separate Apple patches for Gatekeeper bypasses have been incomplete, and leave users exposed to attacks.
Denial-of-Service Flaw Patched in DHCP
The Internet Systems Consortium (ISC) on Tuesday patched a denial-of-service vulnerability in numerous versions of DHCP.