Security Software

Hackers targeting servers running Apache Struts applications, researchers say

A tool for exploiting known Struts vulnerabilities is available on Chinese hacker forums, Trend Micro researchers said

Microsoft moves to block MD5 certificates and improve RDP authentication

Windows optional security updates restrict use of MD5-based certificates and improve Remote Desktop Protocol network-level authentication

Joomla patches file manager vulnerability responsible for hijacked websites

Hacked business domains used to host child abuse images

Industrial control systems targeted by malicious attackers, research shows

A researcher uses a network of simulated water pump systems to monitor how frequently industrial control systems are attacked

Vulnerabilities in D-Link network video recorders enable remote spying, researcher says

The vulnerabilities allow attackers to gain access to devices used to monitor surveillance cameras or provide remote access to stored data

Some home automation systems are rife with holes, security experts say

Trustwave researchers will reveal vulnerabilities in home automation gateways and other network-controlled products at Black Hat

Syrian Electronic Army hacks into Viber support website

No sensistive user information was compromised, Viber Media said

Researcher claims responsibility for security breach at Apple Developer website

The researcher says he was able to obtain names and email addresses of users and claims he reported the flaw to Apple

Cisco releases security patches to mitigate attack against Unified Communications Manager

The company addressed some of the vulnerabilities used in a publicly demonstrated attack, but not all of them