Category: Network Security

Bash or “Shellshock” vulnerability

Summary News is breaking about a major new high severity vulnerability, CVE-2014-6271 , with widespread impact. Gnu Bourne again shell (Bash) is a UNIX like command shell that is included in most distributions of Linux and also Apple OS X. The vulnerability allows an attacker to create environment variables that include malicious code before the system calls the Bash shell.

Old Gmail Leak – WSWiR Episode 121

Patch Day, Home Depot Update, and Gmail Leak Why go searching for all the week’s information security (infosec) news when you can find it in one convenient place. This weekly vlog summarizes the important security updates, hacks, and threats so you can protect yourself. This week’s episode arrives a bit late due to my business travel in Europe.

Adobe Patches Flash but Delays Reader Update

Summary: This vulnerability affects : Adobe Flash Player running on all platforms and Adobe Air How an attacker exploits it : By enticing users to visit a website containing malicious Flash content Impact : In the worst case, an attacker can execute code on the user’s computer, potentially gaining control of it What to do : Download and install the latest version of Adobe Flash Player for your platform Exposure: Adobe Flash Player displays interactive, animated web content called Flash . Although Flash is optional, 99% of PC users download and install it to view multimedia web content.