Patch Out For ‘Ridiculous’ Trend Micro Command Execution Vulnerability

An anonymous reader shares a report on The Register: A bug in its software meant that Trend Micro accidentally left a remote debugging server running on customer machines. The flaw, discovered by Google’s Project Zero researcher Tavis Ormandy, opened the door to command execution of vulnerable systems (running either Trend Micro Maximum Security, Trend Micro Premium Security or Trend Micro Password Manager). Ormandy — who previously discovered a somewhat similar flaw in Trend Micro’s technology — described the latest flaw as ‘ridiculous’. Trend Micro issued a patch for the flaw, a little over a week after Ormandy reported the bug to it on 22 March. The patch is not complete but does address the most critical issues at hand, according to the security firm. Read more of this story at Slashdot.

Continue reading here:
Patch Out For ‘Ridiculous’ Trend Micro Command Execution Vulnerability

Over 1,400 Vulnerabilities Found In Automated Medical Supply System

An anonymous reader writes: Security researchers have discovered 1, 418 vulnerabilities in CareFusion’s Pyxis SupplyStation system — automated cabinets used to dispense medical supplies — that are still being used in the healthcare and public health sectors in the US and around the world. The vulnerabilities can be exploited remotely by attackers with low skills, and exploits that target these vulnerabilities are publicly available. Things already seem to be getting out hands. Read more of this story at Slashdot.

View article:
Over 1,400 Vulnerabilities Found In Automated Medical Supply System

Sony’s Ultra 4K Streaming Service Launching On April 4; Titles Priced At $30

Janko Roettgers reports for Variety: Sony is launching its 4K movie streaming service called Ultra next month: Consumers will be able to buy movies from the service, and stream to supported Sony 4K TV sets, starting April 4. The new service will offer 4K HDR movies to stream, including extras that have previously been able only on physical discs. Ultra ties into UltraViolet, the cloud locker service backed by Sony. Consumers will be able to upgrade SD and HD quality movies from their UltraViolet cloud locker for $12 to $15, respectively. Read more of this story at Slashdot.

Excerpt from:
Sony’s Ultra 4K Streaming Service Launching On April 4; Titles Priced At $30

Linux 4.6 Brings NVIDIA GTX 900 Support, OrangeFS, Better Power Management

An anonymous reader writes: The Linux 4.6-rc1 kernel has been released. New to the Linux 4.6 kernel are a significant number of new features including NVIDIA GeForce GTX 900 open-source 3D support when using the closed-source firmware files, Dell XPS 13 Skylake laptop support, a fix for laptops that were limiting their own performance due to incorrectly thinking they were overheating, AHCI runtime power management support, Intel graphics power management features enabled by default, a new file-system (OrangeFS), and a range of other improvements. Read more of this story at Slashdot.

Read More:
Linux 4.6 Brings NVIDIA GTX 900 Support, OrangeFS, Better Power Management

Atari Vault Hits Steam, Play 100 Classic Games On PC

An anonymous reader quotes an article on SlashGear: Classic and retro video game fans will be eager to hear that Atari Vault has just landed on PC via Steam, making it the easiest way possible to enjoy 100 of the most iconic arcade and home console titles from the early generation of gaming. This eliminates the need to use emulators and ROMs to enjoy games like Asteroids, Centipede, Pitfall, and Pong, not to mention it being cheaper than buying several included titles individually. Read more of this story at Slashdot.

Read this article:
Atari Vault Hits Steam, Play 100 Classic Games On PC

Snapchat Reportedly Acquires Bitmoji Maker Bitstrips For $100 Million

An anonymous reader writes: According to a report from Fortune, Snapchat, the messaging platform which has recently become the number one free app on the App Store, has agreed to acquire Bitstrips, the folks behind the popular emoji-creation service Bitmoji. Fortune’s sources has said the deal is “in the ballpark” of $100 million. TechCrunch writes, “The idea behind Bitmoji is simple. Users download the app and create an Avatar that represents them. They can choose from a wide range of options like face shape, hair color and cut, eye shape and color, etc. From there, Bitmoji is added as a third-party keyboard, and the app offers hundreds of options for users to send to their friends, all featuring their avatar.” It’ll be interesting to see which features of Bitstrips will be implemented into Snapchat, given Bitstrip’s experience with keyboard integrations. Read more of this story at Slashdot.

Taken from:
Snapchat Reportedly Acquires Bitmoji Maker Bitstrips For $100 Million

Netflix’s US Catalog Has Shrunk by More Than 2,500 Titles in Less Than 2.5 Years

According to a report on AllFlicks, a website that lists and categorizes Netflix content, the streaming service’s library for American subscribers has shrunk by a third since 2014. The report claims that in March 2014, the US Netflix library consisted of about 6, 500 movies and 1, 600 television shows. As of this month, the same library offers 4, 330 movies and 1, 200 TV shows. An article on Quartz explains the shrinkage: The reason is that securing international streaming rights to shows and movies is exceedingly difficult — laws and regulations differ by country, as does the type of content that people around the world consume. Netflix hopes that its library in other countries will eventually rival its comprehensive selection in the US. Read more of this story at Slashdot.

See more here:
Netflix’s US Catalog Has Shrunk by More Than 2,500 Titles in Less Than 2.5 Years

Starboard Launches Proxy Fight To Remove Entire Yahoo Board

An anonymous reader quotes a report from Reuters: Activist hedge fund Starboard Value LP moved on Thursday to overthrow the entire board of Yahoo Inc, including Chief Executive Marissa Mayer, who has struggled to turn around the company in her nearly four years at the helm. Starboard, which has been pushing for changes at Yahoo since 2014 and owns about 1.7 percent of the company, said it would nominate nine candidates for the board. The proxy fight comes as Yahoo is pressing ahead with an auction of its core Internet business, which includes search, mail and news sites. Yahoo and Starboard could still come to an agreement before the company’s annual meeting, expected to be in late June. If they cannot avoid a proxy fight and the Yahoo board election is taken to a shareholder vote, attention will swing to the large mutual and index funds that own the stock and will carry heavy weight in the final tally. Yahoo and Starboard representatives met on March 10 to discuss ways the two sides could avoid a proxy fight, according to people familiar with the matter. But those talks broke down, in part because Starboard was upset by Yahoo’s announcement that same day that it appointed two new board directors, these people say. Read more of this story at Slashdot.

Read the original post:
Starboard Launches Proxy Fight To Remove Entire Yahoo Board

U.S. Indicts 7 Iranians Accused of Hacking U.S. Financial Institutions

An anonymous reader quotes a report from NPR: The U.S. Department of Justice has indicted seven Iranians with intelligence links over a series of crippling cyberattacks against 46 U.S. financial institutions between 2011 and 2013. The indictment, which was unsealed Thursday, also accuses one of the Iranians of remotely accessing the control system of a small dam in Rye, N.Y, during the same period. Attorney General Loretta Lynch said the indictment is meant to send a message: “That we will not allow any individual, group, or nation to sabotage American financial institutions or undermine the integrity of fair competition in the operation of the free market.” According to the indictment, the seven men worked for two Iran-based computer security companies that have done work for the Iranian government, including the powerful Islamic Revolutionary Guard Corps. The men allegedly carried out large-scale distributed denial of service (DDoS) attacks, which overwhelm a server with communications in order to disable it. Read more of this story at Slashdot.

More:
U.S. Indicts 7 Iranians Accused of Hacking U.S. Financial Institutions

CCTV DVR Vulnerabilities Traced To Chinese OEM Which Spurned Researchers’ Advice

An anonymous reader writes: RSA security researcher Rotem Kerner has identified a common vulnerability in the firmware of 70 different CCTV DVR vendors, which allows crooks to execute code and gain root privileges on the affected devices. The problem was actually in the firmware of just one DVR sold by Chinese firm TVT. The practice of “white-labeling” products helped propagate this issue to other “manufacturers” who did nothing more than to buy a non-branded DVR, tweaked its firmware, slapped their logo on top, and sold it a their own, vulnerability included. Read more of this story at Slashdot.

View article:
CCTV DVR Vulnerabilities Traced To Chinese OEM Which Spurned Researchers’ Advice