August 19, 2016
Threatpost News Wrap, August 19, 2016
August 19, 2016
Why you should hire good, skilled cybersecurity professionals
��}ے�F���(Q3″i/}�f�Z����QK���ڎ”P$��f�rG�ا�؍8���s��|�ff@�$��� i�Tee孲�����=yy�����x~��ݣa4r���A�”��Y����W݊78`�(����Hnx�u� �����w4����%�/��Sύ�io&��0S��V”q��9�A(�n� 3������v�|�=’��Ӯ�”_��#ѭ�b�{A�)=��hصĥm �~4��ڑ�-4�#��2H�8B�Hh�”�� �xn�y��/����`w���E��E�����j��|��پ���0 /�c[�y|��HXL����^�@8�JM�D@Ev3+l$,�w+~`��u��V���>�})BaƁMt�c_SH�P�Dh�w�fPC�� ���w�螦�7C;dH
August 19, 2016
Twitter suspends 360,000 accounts for terrorist ties
August 19, 2016
The NSA’s hoard of cyber weapons makes some experts nervous
August 19, 2016
Keep using password managers — bugs and all
August 19, 2016
WikiLeaks uploads 300+ pieces of malware among email dumps
August 19, 2016
EFF Blasts Microsoft Over ‘Malicious’ Windows 10 Rollout Tactics
August 18, 2016
Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of Libgcrypt’s random number generator. An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output. A first analysis on the impact of this bug for GnuPG shows that existing […]
August 18, 2016
Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of GnuPG’s random number generator. An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output. A first analysis on the impact of this bug for GnuPG shows that existing […]
August 18, 2016
Beware; Hackers targeting Pokemon Go Users with Smishing Scam
August 18, 2016
Debian: 3650-1: libgcrypt20: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3650-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 17, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : libgcrypt20 CVE ID : CVE-2016-6313 Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of Libgcrypt’s […]
August 18, 2016
Debian: 3649-1: gnupg: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3649-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 17, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : gnupg CVE ID : CVE-2016-6313 Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of GnuPG’s […]
August 18, 2016
OIG Report Finds Vulnerabilities in Medicaid Services Agency
August 18, 2016
GPG Patches 18-Year-Old Libgcrypt RNG Bug
August 18, 2016
Scammers Used Google AdSense to Drop Malware on Android Devices
August 18, 2016
Locky Targets Hospitals In Massive Wave Of Ransomware Attacks
August 18, 2016
Snowden says Russia ‘probably responsible’ for NSA hack
August 18, 2016
Unsecured DNSSEC Easily Weaponized, Researchers Warn
August 18, 2016
The Future Of ATM Hacking
August 18, 2016
US: We’re now ready to give up our role governing the internet
August 18, 2016
Nemucod serves nasty package: Ransomware and ad-clickers
Just last week ESET reported on Nemucod shifting away from ransomware and downloading the ad-clicking malware Kovter instead. Now, it seems that the operators of the notorious downloader went a step further and are serving their victims the whole package – ransomware as well as ad-clickers. As before, the targeted user receives an email with […]
August 18, 2016
Poorly Configured DNSSEC = Potential DDoS Weapon
August 18, 2016
6 Things To Know For Securing Amazon Web Services
August 18, 2016
Pen-testing made easy with Datasploit social engineering toolset
August 18, 2016
No One Wants to Buy Those Stolen NSA-Linked ‘Cyberweapons’
August 18, 2016
Alleged NSA data dump contains sophisticated hacking tools
August 18, 2016
Let’s Encrypt ups rate limits
August 18, 2016
Individual arrested in connection with high-profile data at Sage
The City of London Police has confirmed the arrest of a 32-year-old employee in connection with a high-profile data breach at Sage. The woman was apprehended at Heathrow Airport, as part of the force’s “ongoing fraud investigation” into the incident at the accounting and payroll software company. This arrest all but confirms that the unauthorized […]
August 18, 2016
PayPal patches 2FA portal bug
August 18, 2016
Google hopes to sniff out OS X badware
August 18, 2016
Fortinet follows Cisco in confirming Shadow Broker vuln
August 18, 2016
Bitcoin ‘targeted by state sponsored attackers’ says Bitcoin.org
August 18, 2016
NSA website goes down as hackers auction stolen ‘cyber weapons’
August 17, 2016
Someone Hacked Traffic Sign with Anti-Police Message in Denver
August 17, 2016
Cisco confirms two of the Shadow Brokers’ ‘NSA’ vulns are real
August 17, 2016
Cisco Acknowledges ASA Zero Day Exposed by ShadowBrokers
August 17, 2016
Ubuntu: 3062-1: OpenJDK 7 vulnerabilities Posted by Anthony Pell Several security issues were fixed in OpenJDK 7. ========================================================================== Ubuntu Security Notice USN-3062-1 August 16, 2016 openjdk-7 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 14.04 LTS Summary: Several security issues were fixed in OpenJDK 7. Software Description: […]
August 17, 2016
Red Hat: 2016:1617-01: kernel: Important Advisory Posted by Anthony Pell An update for kernel is now available for Red Hat Enterprise Linux 6.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact [More…] ===================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2016:1617-01 Product: […]
August 17, 2016
Pokémon GO Spam, Ransomware, On the Rise
August 17, 2016
Browser Address Bar Spoofing Vulnerability Disclosed
August 17, 2016
Profit-hungry Ghouls raid corporate networks worldwide
August 17, 2016
WikiLeaks Turkish AKP Email Dumps Contain Malware; Researcher
August 17, 2016
IT security woman hits back at sexist trolls on LinkedIn
August 17, 2016
Beware bogus blue verified checkmark scams on Twitter
August 17, 2016
ShadowBrokers’ Leak Has ‘Strong Connection’ to Equation Group
August 17, 2016
Nemucod now spreading banking trojans in Brazil
On the morning of Friday August 12th, ESET researchers noticed a huge outbreak of a new Spy.Banker variant, detected as Spy.Banker.ADEA. It happened at around 12pm CET. This new variant is similar to previous ones used by other banking trojans in South America. During execution, the malware checks if the system’s settings are in Portuguese […]
August 17, 2016
‘Video jacking’ attack allows attacker to see what you see
August 17, 2016
Trump’s ‘extreme’ anti-terrorism vetting may be H-1B nightmare
August 17, 2016
Shark bosses sink teeth into booming ransomware market
August 17, 2016
Cerber ransomware operation exposed… and boy is it lucrative!
August 17, 2016
He’s a p0wnball Wizard, and he’s twisted one Ubuntu-powered game
August 17, 2016
#Shadowbrokers hack could be Russia’s DNC counter-threat to NSA
August 17, 2016
FalseCONNECT sends vendors scrambling to patch proxy MITM bug
August 17, 2016
PGP admins: Kill short keys now, or Alice will become Chuck
August 17, 2016
Risk Level: Very Low. Type: Trojan, Virus, Worm.
August 17, 2016
After Linux, TCP Exploit Expandable to 80% of Android Devices
August 16, 2016
Today, we’ll look at yet another variant in the massive crop of malware that takes users’ files hostage: Nemucod ransomware. Nemucod is a ransomware which changes file names to *.crypted. While it’s not a brand new variant, a lot has changed in the last few months, and different methods have been used, but one constant has […]
August 16, 2016
VeraCrypt Audit Under Way; Email Mystery Cleared Up
August 16, 2016
Pokémon Go for Windows? Beware ransomware!
August 16, 2016
Vawtrak Banking Trojan Adds DGA, SSL Pinning
August 16, 2016
$2.5 Million-a-Year Ransomware-as-a-Service Ring Uncovered
August 16, 2016
Cerber ransomware earns $2.3M with 0.3% response rate
August 16, 2016
Galaxy Note 7 catches the eye and more
August 16, 2016
New Point-of-Sale Malware Campaign hits 20 Hotels in US
August 16, 2016
VeraCrypt security audit: Four PGP-encoded emails VANISH
August 16, 2016
Why security is a transversal issue for video games development
How many times in the field of software development have we heard that safety must be considered from the outset to the release – and subsequent maintenance – of the app or program in question? Hundreds, right? Fortunately, developers have understood this fundamental concept for programming, especially those who write code for operating systems or […]
August 16, 2016
The World Series of Hacking-without humans
August 16, 2016
A New Wireless Hack Can Unlock 100 Million Volkswagens
August 16, 2016
How 3 fintech startups are shaking up security
August 16, 2016
6 security advances worth celebrating
In the spirit of the Olympics, it’s time to celebrate our hard-won computer security defense advancements. Given the endless stream of news about embarrassing hacks and data breaches, I can see why you might be skeptical. The fact is tens of millions of computers are currently exploited, nearly every company is owned, and those that […]
August 16, 2016
A simple way to kill off Twitter trolls
August 16, 2016
White hat pops Windows User Account Control with log viewer data
August 16, 2016
Brisbane council loses $500k to scammers
August 16, 2016
Researchers crack homomorphic encryption
August 16, 2016
Discovered: August 16, 2016 Updated: August 16, 2016 3:24:49 PM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Antivirus Protection Dates Initial Rapid Release version August 16, 2016 revision 007 Latest Rapid […]
August 16, 2016
TCP Flaw in Linux Extends to 80 Percent of Android Devices
August 15, 2016
Hackers Claim Stealing NSA Hacking Tools; Selling Them Online
August 15, 2016
Latest Windows UAC Bypass Permits Code Execution
August 15, 2016
Google AdSense abused to distribute Android spyware
August 15, 2016