Vulnerabilities & Exploits

The latest hacks on Ubuntu, Clash of Kings, Warframe, and most recently, Disney’s Playdom have two things in common—all are running vBulletin. Learn more.

This research paper highlights the flaws of the WPAD protocol, describes how it works, and why it is a serious security concern, especially under the altered conditions in today’s connected world.

Pwn2Own is all about owning systems/devices—a test of technical skill to see who the best hacker is. It also demonstrated how browsers and plug-ins can be used as effective attack vectors.

Various business websites were recently hijacked to deliver crypto-ransomware to visitors. Why do attackers repeat the cycle of compromising legitimate websites via exploit kits, malware and vulnerable software?

Vetted hackers who participated in the Department of Defense’s ‘Hack the Pentagon’ bug bounty program uncovered over 100 security flaws in its public websites.

A security informatics team in John Hopkins University has raised concerns over the security of drones (unmanned aerial vehicles or UAVs) after it hijacked one and sent it crashing.

Google has released their latest monthly Android security update, addressing critical security flaws. Here’s what you need to know.

Researchers discover a security loophole that potentially puts users of widely-used Mitsubishi Outlander at risk.

Lenovo advises its customers to uninstall vulnerable preloaded software which could lead to dangerous man-in-the-middle attacks.