The seventh entry on the most recent OWASP Top 10 release (from 2013, due to the 2017 release candidate being rejected!) is "Missing Function Level Access Control", which is essentially what leads to Privilege Escalation issues. This common vulnerability…

Google will automatically delete all of a user's Android backup files — stored in his Google Drive account — if the user does not use his phone for two weeks.

Hola secuaces: Seguro que con el mapa en la portada ya os he 'ganado' :D Hace tiempo que no tocamos a nuestro…

Project Protego: CIA's Secret Missile Control System installed on-board a Pratt and Whitney Aircraft (PWA)

IT security researchers at Kromtech Security Center discovered an unprotected database exposed online due to misconfiguration of CouchDB containing nearly 

The hacking group OurMine says it leaked the data after being told “f*ck off, you don’t have anything”

El investigador Aaron Portnoy ha identificado esta vulnerabilidad la cual puede permitir a un usuario remoto no autenticado la ejecución de comandos arbitrarios con altos privilegios en el sistema.

Boletín de noticias de seguridad informática unaaldia, ofrecido por Hispasec

Avast published earlier today a post-mortem of the CCleaner malware incident, in the hopes to clarify some of the details surrounding the event that many of its users found troubling.

¿Qué es el  European Cyber Security Challenge? El campeonato European Cyber Security Challenge (ECSC) es una iniciativa de la ENISA, liderada por un grupo de países europeos organizadores de competiciones nacionales de ciberseguridad.

Security researchers have detected a new Android banking trojan by the name of Red Alert 2.0 that was developed during the past few months and has been recently rolled out into distribution.

SecurityFocus is designed to facilitate discussion on computer security related topics, create computer security awareness, and to provide the Internet's largest and most comprehensive database of computer security knowledge and resources to the public. It…

Lo de utilizar una consola Bash dentro de Windows 10 ya era una utopía hace unos años, pero es que el amor de Microsoft por Linux y el Open Source sigue crec...

The Apache Foundation has released security updates to address vulnerabilities in Apache Tomcat. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected server. 

I'm talking about DFIR (Digital Forensics and Incident Response) for WiFi networks at DerbyCon 2017 and will be releasing nzyme (an open source tool to record and forward 802.11 management frames into Graylog for WiFi security monitoring and incident response)…

MustLive has realised a new security note D-Link DGS-3000-10TC Multiple Vulnerabilities