Skip to content

Gotham Security Daily Threat Alerts

by on January 29, 2015

January 28, Softpedia– (International) D-Link routers vulnerable to unauthorized DNS changing. A recently published proof-of-concept exploit from a security researcher at Ethical Hacker, illustrated a vulnerability found in DSL router model D-Link DSL-2740R, which allows remoter hackers to change the device’s domain name system (DNS) settings and redirect users to malicious online locations hosting malware or phishing pages. Source

January 28, Securityweek – (International) Flash Player update patches two critical vulnerabilities. Adobe released an update in Flash Player to version 16.0.0.296 to address a zero-day vulnerability, CVE-2015-0311, the second of two previously unreported critical flaws that have been patched in the last week, that allows attackers to install malware by visiting compromised websites or malicious ads in their browsers. Source

January 28, Securityweek – (International) Serious vulnerability in Blackphone exposed messages, location. A security flaw in Silent Text, an instant messaging app available on the privacy-focused Blackphone, could be exploited by a remote attacker to execute arbitrary code and enable the complete control of a targeted device. The vulnerability has been closed by Blackphone and its developer Silent Circle. Source

January 27, Securityweek – (International) Apple to Patch Thunderstrike, vulnerabilities disclosed by Google. Apple released updates for its OS X operating system that includes patches for several vulnerabilities including a flaw in the software that enabled the Thunderstrike boot kit attack. Source

 

 

From → Security

Comments are closed.

%d bloggers like this: