IT News | Extol Corporation Sdn Bhd

Latest Cybersecurity News from the World

IT News

How to patch Meltdown CPU Vulnerability CVE-2017-5754 on Linux

January 5, 2018 By aatech

A very serious security problem has been found in the Intel CPUs. Meltdown CPU Vulnerability CVE-2017-5754 breaks the most fundamental isolation between user applications and the operating system. This attack allows a program to access the memory, and thus also the secrets, of other programs and the operating system. How do I protect my Linux […]

IT News

Researchers Found Two Major Security Flaws In Processors That Affect Most Of The World’s Computers

January 5, 2018 By aatech

The two flaws, nicknamed Meltdown and Spectre, could give hackers access to the entire memory of nearly all the world’s computers. Cybersecurity researchers have discovered two flaws in microprocessors that could grant hackers access to the entire memory stored on practically any computer in the world. On a website created to explain the flaws, researchers […]

IT News

RAT DISTRIBUTED VIA GOOGLE DRIVE TARGETS EAST ASIA

January 4, 2018 By aatech

Researchers said that they are tracking a new remote access Trojan dubbed UBoatRAT that is targeting individuals or organizations linked to South Korea or the video game industry. While targets aren’t 100 percent clear, researchers at Palo Alto Networks Unit 42 said UBoatRAT threats are evolving and new variants are increasingly growing more sophisticated. They […]

IT News

TEAMVIEWER RUSHES FIX FOR PERMISSIONS BUG

January 3, 2018 By aatech

Remote support software company TeamViewer said Tuesday it issued a hotfix for a bug that allows users sharing a desktop session to gain control of the other’s computer without permission. The bug was first publicized by a Reddit user “xpl0yt” on Monday who linked to a proof-of-concept example of a vulnerability created by the bug […]

IT News

ANDROID FLAW ALLOWS ATTACKERS TO POISON SIGNED APPS WITH MALICIOUS CODE

January 2, 2018 By aatech

Among the four dozen vulnerabilities Google patched this week was a fix for a bug that allowed attackers to inject malicious code into Android apps without affecting an app’s signature verification certificate. The technique allows an attacker to circumvent device anti-malware protection and escalate privileges on targeted device with a signed app that appears to […]

IT News

APPLE FIXES FLAW IMPACTING HOMEKIT DEVICES

January 1, 2018 By aatech

Apple said it has fixed an undisclosed vulnerability in its HomeKit framework that could have allowed unauthorized remote control of HomeKit devices such as smart locks and connected garage door openers. The flaw was first reported by the publication 9to5Mac on Thursday. According to the publication, the vulnerability requires an iPhone or iPad running the […]

IT News

Fake Bitcoin Wallet Apps Removed from Google Play

December 29, 2017 By aatech

Three fake Bitcoin applications were recently removed from Google Play after security researchers discovered they were tricking users into sending funds to their developers, mobile security firm Lookout has discovered. The impressive increase in Bitcoin value over the past several months has stirred interest from individuals worldwide, including cyber criminals. The number of attacks involving […]

IT News

Mozilla Patches Critical Bug in Thunderbird

December 28, 2017 By aatech

Mozilla issued a critical security update to its popular open-source Thunderbird email client. The patch was part of a December release of five fixes that included two bugs rated high and one rated moderate and another low. Mozilla said Thunderbird, which is also serves as a news, RSS and chat client, the latest Thunderbird 52.5.2 […]

IT News

Siemens Update Patches SIMATIC PCS 7 Bug in Some Versions

December 27, 2017 By aatech

Siemens has made an update available for some of its SIMATIC PCS 7 distributed control systems that are impacted by a remotely exploitable input validation vulnerability. Siemens said version 8.2 and V8.1 prior to 8.1 SP1 with WinCC v7.3 Update 13 are affected. “Successful exploitation of this vulnerability could allow a remote authenticated attacker to […]

IT News

GitHub Warns Developers When Using Vulnerable Libraries

December 26, 2017 By aatech

Code hosting service GitHub now warns developers if certain software libraries used by their projects contain any known vulnerabilities and provides advice on how to address the issue. GitHub recently introduced the Dependency Graph, a feature in the Insights section that lists the libraries used by a project. The feature currently supports JavaScript and Ruby, […]