American Airlines Flights Delayed By Crashing iPads

Dozens of American Airlines have suffered serious delays yesterday because the iPads by pilots, which are used for the flight suddenly crashed. An iPad app with navigation data and information on airport proved to be the culprit. According to Jeppesen, a subsidiary of Boeing and creator of the app, the problem was caused by a double folder in the database.

When loading a folder on the runway of the Ronald Reagan Washington National Airport showed the new version of the directory to conflict with the old version and caused the crash. Pilots could solve the problem ultimately by removing the app, and then reinstall it. In total, 70 flights because of the crashing iPads have slowed, reports the website Re / code . American Airlines was the first airline that decided to replace the cumbersome and awkward flight manuals by a tablet, which is now the norm in the industry is becoming, as the late New York Times know.

Security Firm Warns Of Hype About WordPress Leak

An American security company has warned the hyping of leaks in the content management system WordPress. Following are reports on various websites about a leak in a WordPress plug-in which more than one million websites were exposed to risk.

The vulnerability was in the plugin called WP Slim Stat. Via the leak would be a "blind" SQL Injection attack are possible.Allows an attacker could read information from the database. According to security firm WhiteFir design these types of vulnerabilities are not used in automated attacks, which most WordPress sites have to deal with. In addition, the leak at the time of news coverage already patched.

"The chances that the leak is abused are quite small compared to a vulnerability that affects PHP files can be uploaded to a website, which will surely be attacked," said the IT security officer. The company also criticizes said plurality of more than 1 million Web sites. The plug-in in question has been downloaded over 1 million times, but downloads does not mean that there are as many websites with the plug-in.

In the case of WordPress are namely also updates to plugins counted as a download. The number of actual users is therefore much lower than the number of downloads. According WhiteFir Design have also the media the opportunity to harm the security of WordPress sites. Users should keep their plugins namely always up-to-date, especially since developers do not always mention that they have remedied vulnerabilities.

Jeb Bush Puts Email Archive Including Viruses Online

The possible Republican presidential candidate Jeb Bush, also son of George HW Bush, was in the news this week because he an archive with more than 330,000 emails from his time as governor of the state of Florida put online. Not only the emails proved the social security numbers and other identifying information of some 12,000 people to contain, also all kinds of email viruses were found in the archive.

In addition to a web interface to read the emails Bush also offered the unedited Microsoft Outlook files. Containing all the infected e-mail attachments were discovered. As proved several emails from the 2001 database file "Happy99.exe" contain, this was a worm for Windows 95, 98 and NT systems, also known as "Ska", which first appeared in 1999, as reports IT World.

In addition, a Visual Basic worm called "JS / Poop" and found the highly contagious email worms "Sircam" and "Badtrans".Both worms knew in 2001 a large number of computers to infect via email. Meanwhile, the Outlook files are removed as well as the personal information of people who emailed with Bush. Whether Bush at the time also was infected by the malware is unknown.

IBM: Most stores In US Attacked via Command Injection

Most stores in the United States that it was the last year the target of an attack were attacked through command and SQL injection, according to a study ( pdf ) from IBM. According to the company halved the number of attacks against American chains, but there were or 61 million records stolen. Every day some 3,000 attacks would be observed, although IBM does not let you know where exactly consist. However, there was an increase in the number of attacks on cash-malware, which criminals infect the systems used by stores to checkout.

Despite several major incidents involving cash-malware played a leading role involved in most incidents in the retail sector command and SQL injection. In command injection are vulnerable applications through commands on the underlying server. SQL injection allows an attacker to execute SQL commands, making it possible for example to read sensitive data from the database.

"The complexity of SQL implementations and the lack of data validation by managers shall ensure that databases are a major target," said the researchers from IBM. Thus, command injection attacks against at nearly 6,000 stores observed. Whilst also brute force attacks and Shellshock leak used by attackers.