IT News | Extol Corporation Sdn Bhd

IT News

Five Critical Android Bugs Get Patched in October Update

October 5, 2017 By aatech

Four critical vulnerabilities were reported by Google Monday as part of its October Android Security Bulletin. In all, 14 patches were issued for corresponding vulnerabilities, ranging from critical to high. The relative low bug count for the month of October is due to the fact this month Google announced it would handle security bulletins differently. […]

Latest Cybersecurity News from the World

IT News

Netgear Patches Over 50 Flaws in Routers, Switches, NAS Devices

October 4, 2017 By aatech

Netgear published more than 50 security advisories in the past two weeks to inform customers about the availability of patches for vulnerabilities affecting many of the company’s routers, switches, network-attached storage (NAS) devices, and wireless access points. There are a total of 14 advisories describing vulnerabilities in various ReadyNAS devices, including command injections, security misconfigurations, […]

IT News

Remote Wi-Fi Attack Backdoors iPhone 7

October 3, 2017 By aatech

Google on Tuesday disclosed details and a proof-of-concept exploit for a Wi-Fi firmware vulnerability in Broadcom chipsets patched this week in iOS 11. The attack enables code execution and persistent presence on a compromised device. “The exploit gains code execution on the Wi-Fi firmware on the iPhone 7,” said Google Project Zero researcher Gal Beniamini, […]

Extol Panda security Solution specialist

IT News

BlueBorne Bluetooth hack could affect millions of smartphones

October 2, 2017 By aatech

Bluetooth is an important smartphone technology, allowing us to transfer files, or to listen to music, wirelessly. It’s so useful that many people leave it switched on all the time. But researchers have discovered a vulnerability in the technology that allows hackers to take control of a victim’s phone remotely. Known as “BlueBorne”, the technique […]

IT News

WordPress 4.8.2 is out, update your website now

September 29, 2017 By aatech

WordPress 4.8.2 is out, featuring nine security fixes website owners will want to apply, well, now. All told, there have been six updates this year featuring security fixes, including January’s silent patch for a nasty zero day, this being the first since May’s v4.7.5. The maintenance side of the update features six other software updates […]

IT News

Android App Siphons Data on 200 Million Users

September 28, 2017 By aatech

A popular Android keyboard application with over 200 million downloads was found gathering user information sending the data a remote server, Adguard reveals. The offending application, GO Keyboard, has two versions available in Google Play, namely GO Keyboard – Emoji keyboard, Swipe input, GIFs and GO Keyboard – Emoticon keyboard, Free Theme, GIF, each with […]

IT News

Samba Update Patches Two SMB-Related MiTM Bugs

September 27, 2017 By aatech

Samba this week released three security updates, including two related to SMB connections that could be abused by an attacker already on the network to hijack connections and manipulate traffic or data sent from a client. The most serious of the bugs is CVE-2017-12150 where with certain configurations, Samba fails to enforce SMB signing in […]

IT News

CCleaner Attack Targeted Telecoms, Network Hardware Providers

September 26, 2017 By aatech

The malware inserted into CCleaner, a popular system utility downloaded by at least 2.3 million users, is far more serious than originally thought, specifically targeting the makers of networking equipment and enterprise software, according to evidence uncovered by investigators and published on Sept. 20. While Avast—the security firm that acquired CCleaner with its purchase of […]

IT News

1.4 Million Phishing Sites Are Created Monthly: Report

September 25, 2017 By aatech

According to a new report, an average of 1.385 million unique new phishing sites are created every month, peaking at 2.3 million in May 2017. The majority of these are online and active for an average of just 4 to 8 hours. This combination of volume and brevity makes it effectively impossible to counter phishing […]

IT News

VMware Patches Bug That Allows Guest to Execute Code on Host

September 21, 2017 By aatech

Users who run four different types of VMware products, ESXi, vCenter Server, Fusion and Workstation, are being encouraged to update to address a series of vulnerabilities, one critical. The most serious issue, an out-of-bounds write vulnerability, exists in ESXi, and desktop hypervisors Workstation, and Fusion. An attacker could exploit the issue, which exists in a […]