IT News | Extol Corporation Sdn Bhd

Latest Cybersecurity News from the World

IT News

December 7, 2017 By aatech

Google is cracking down on unwanted and harmful Android apps with a new effort that will show warnings on applications and on third-party websites distributing apps that collect personal data without user consent. The effort is an expansion of the Google Safe Browsing team’s mission to enforce the company’s recently updated Unwanted Software Policy for […]

IT News

Mailsploit Allows Spoofed Mails to Fool DMARC

December 6, 2017 By aatech

A German security researcher has discovered a group of vulnerabilities in various email clients, collectively dubbed Mailsploit, which allow an attacker to spoof email sender identities without being picked up by DMARC. Mailsploit also allows the bad guys to launch cross-site scripting (XSS) and code-injection attacks. According to Sabri Haddouche, the bombshell issue is that […]

IT News

Intel Patches CPU Bugs Impacting Millions of PCs, Servers

December 5, 2017 By aatech

Intel released patches on Monday to protect millions of PCs and servers from vulnerabilities found in its Management Engine, Trusted Execution Engine and Server Platform Services that could allow local attackers elevate privileges, run arbitrary code, crash systems and eavesdrop on communications. In a security bulletin (INTEL-SA-00086) posted late Monday, Intel said the patches were […]

IT News

Apple Patches USB Code Execution Flaw in macOS

December 4, 2017 By aatech

One of the vulnerabilities addressed by Apple in its latest set of security patches for macOS is an arbitrary code execution flaw, which could be exploited via malicious USB devices. Discovered by Trend Micro security researchers and reported to Apple in April this year, the issue resides in fsck_msdos, a system tool designed to check […]

Extol Panda security Solution specialist

IT News

Uber cover-up places 57 million people at risk of identity fraud

December 1, 2017 By aatech

Ride hailing firm Uber has revealed a major hack last year exposed the personal data of 57 million users. Even worse is the news that Uber’s security chief paid the hackers $100,000 to cover up the incident in the hope of preventing the breach from going public. The incident was announced by Uber CEO Dara […]

IT News

New Mirai Variant Emerges

November 30, 2017 By aatech

A new variant of the Mirai malware has been observed over the past week targeting new sets of default credentials specific to ZyXEL devices, Qihoo 360 Netlab researchers warn. Mirai became widely known about a year ago, when it started ensnaring insecure Internet of Things (IoT) devices into a botnet capable of launching massive distributed […]

IT News

Amazon Echo and Google Home patched against BlueBorne threat

November 28, 2017 By aatech

The Amazon Echo and Google Home are being marketed to the world as the “smart speakers” to put helpful, voice-assisted Internet of Things (IoT) AI into people’s homes.This week we had wearying confirmation that they also, less helpfully, distribute the same security failings into people’s homes as every other device. Specifically, Amazon and Google have […]

IT News

Oracle Issues Emergency Patches for ‘JoltandBleed’ Vulnerabilities

November 27, 2017 By aatech

Oracle pushed out an emergency update for vulnerabilities affecting several of its products that rely on its proprietary Jolt protocol. The bugs were discovered by researchers at ERPScan who named the series of five vulnerabilities JoltandBleed. The vulnerabilities are severe, with two of the bugs scoring 9.9 and 10 on the CVSS scale. Products affected […]

IT News

GitHub Warns Developers When Using Vulnerable Libraries

November 24, 2017 By aatech

Code hosting service GitHub now warns developers if certain software libraries used by their projects contain any known vulnerabilities and provides advice on how to address the issue. GitHub recently introduced the Dependency Graph, a feature in the Insights section that lists the libraries used by a project. The feature currently supports JavaScript and Ruby, […]