Stories by Jeremy Kirk

Google+

GitHub recovering from massive DDoS attacks

Software development platform GitHub said it was still experiencing intermittent outages from the largest cyberattack in its history but had halted most of the attack traffic.

By Jeremy Kirk | 30 March, 2015 12:00

Tags: GitHub, security

An SDN vulnerability forced OpenDaylight to focus on security

Open-source software projects are often well intended, but security can take a back seat to making the code work.

By Jeremy Kirk | 27 March, 2015 11:20

Tags: patches, open source, security, OpenDaylight, software, IIX, Exploits / vulnerabilities

Facebook's Like button can still easily be gamed

Facebook's Like button is a pervasive feature of the Web, a way to gauge the popularity of a website or piece of content. But researchers have found it's easy to inflate the numbers, undermining its value as an accurate measure of popularity.

By Jeremy Kirk | 26 March, 2015 14:41

Tags: Internet-based applications and services, McGill University, security, social networking, internet, Facebook

Egyptian company says rogue Google SSL certificates were a mistake

An Egyptian company that created unauthorized digital certificates for several Google domains said Wednesday it made a mistake and acted quickly when the error became known.

By Jeremy Kirk | 26 March, 2015 11:27

Tags: MCS Holdings, security

Zero day, Web browser vulnerabilities spike in 2014

The number of zero-day and Web browser vulnerabilities shot up in 2014, but overall software vendors are patching faster.

By Jeremy Kirk | 25 March, 2015 23:00

Tags: patches, secunia, security, Exploits / vulnerabilities

Android flaw puts personal data at risk for millions

Nearly half of Android devices are vulnerable to an attack that could replace a legitimate app with malicious software that can collect sensitive data from a phone.

By Jeremy Kirk | 25 March, 2015 11:04

Tags: palo alto networks, Android OS, Google, security, mobile security, Exploits / vulnerabilities

Security startup records a year's network data

A security startup has developed a platform that gives security professionals a much larger picture of what has happened on their network, even if they might have missed the initial signs of an intrusion.

By Jeremy Kirk | 25 March, 2015 00:01

Tags: security, ProtectWise

Google catches bad digital certificates from Egyptian company

Google said Monday an Egyptian company issued digital certificates that could have been used to intercept data traffic to its services, which did not appear to have been abused.

By Jeremy Kirk | 24 March, 2015 14:54

Tags: Google, MCS Holdings, security, mozilla

Fake patient data could have been uploaded through SAP medical app

SAP has fixed two flaws in a mobile medical app, one of which could have allowed an attacker to upload fake patient data.

By Jeremy Kirk | 23 March, 2015 11:43

Tags: applications, security, enterprise resource planning, SAP, software, Exploits / vulnerabilities, ERPScan, business intelligence

To avoid NSA, Cisco gear gets delivered to strange addresses

One of the most successful U.S. National Security Agency spying programs involved intercepting IT equipment en route to customers and modifying it.

By Jeremy Kirk | 20 March, 2015 14:18

Tags: Cisco Systems, security

Mandrill warns attack may have exposed some data about email

Mandrill warned customers on Wednesday that some email-related data may have been exposed after attackers tried to lasso some of its servers into a botnet.

By Jeremy Kirk | 19 March, 2015 10:20

Tags: Internet-based applications and services, The Rocket Science Group, security, Mail, internet, privacy

Premera, Anthem data breaches linked by similar hacking tactics

Premera Blue Cross may have been attacked using the same methods employed against its fellow health insurer Anthem, suggesting that a single group may be behind both breaches.

By Jeremy Kirk | 18 March, 2015 15:18

Tags: Anthem, security, data breach, Premera Blue Cross, Exploits / vulnerabilities

Hundreds of Android and iOS apps are still vulnerable to FREAK attacks

Hundreds of Android and iOS apps are still vulnerable to a dangerous attack revealed two weeks ago that can compromise encrypted data, a security vendor said Tuesday.

By Jeremy Kirk | 18 March, 2015 12:04

Tags: applications, telecommunication, ios, security, mobile security, Mobile OSes, mobile, Exploits / vulnerabilities, Apple, Android OS, Google

Premera Blue Cross says data breach may affect 11 million customers

As many as 11 million customers may have been affected by a data breach at U.S. health insurance provider Premera Blue Cross, in the second large attack against the health care industry disclosed in the last two months.

By Jeremy Kirk | 18 March, 2015 10:40

Tags: intrusion, security, data breach, Premera Blue Cross

OpenSSL mystery patches due for release Thursday

New versions of OpenSSL will be released on Thursday to patch several security vulnerabilities, one of which is considered highly serious, according to the OpenSSL Project Team.

By Jeremy Kirk | 17 March, 2015 13:55

Tags: patches, OpenSSL, security, Exploits / vulnerabilities

Top Whitepapers

Twitter Feed

Featured Whitepapers