August 9, 2016
Internet of Car…rikey what the hell just happened to my car?
August 9, 2016
Nigerian scammer infects himself with malware
August 9, 2016
Nemucod is back and serving an ad-clicking backdoor instead of ransomware
The trojan downloader Nemucod is back with a new campaign. This time however, it has changed the payload served to its victims – ransomware is not its go-to malware. Currently the “weapon of choice” is a backdoor detected by ESET as Win32/Kovter, in this instance mainly focusing on ad-clicking. As a backdoor, this trojan allows […]
August 9, 2016
Car hacking: Defcon style
This year at Defcon, the car hacking village is bigger than ever, with more cars, car hacking adapters and giant snarls of tiny exposed wires tied to demo stations with car parts screwed to plywood stands than ever before. It’s car hacking 101 here, and class is in full force. The first thing you notice […]
August 9, 2016
NIST: It’s time move on from SMS 2FA
SMS-based two-factor authentication (2FA) should be phased out, according to the National Institute of Standards and Technology (NIST) at the US Department of Commerce. In its most recent Digital Authentication Guideline – draft version – the federal technology agency explained that this is because there are risks with this approach. NIST stated that as SMS messages […]
August 9, 2016
Torrentz Has Died, But It Won’t Take Torrenting With It
August 9, 2016
Hackers Fool Tesla S’s Autopilot to Hide and Spoof Obstacles
August 9, 2016
Google Domain Enables HSTS Protection
August 9, 2016
SHA-2 shortcut: Easy certificate management for Linux
I spend a lot of time working on enterprise Public Key Infrastructure (PKI), especially in light of the coming SHA-1 deprecation deadlines. It’s nearly all I do these days. One question my customers ask all the time is how to provision certificates on non-Windows devices and computers. Microsoft does an excellent job of automating the […]
August 9, 2016
Black Hat 2016: When middleware takes over the world
In years past at Black Hat here in Las Vegas, there was row after row of hardware, then, in later years, row after row of software for your workstation. Now there’s row after row of middleware designed to interpret all that data in real time and try to make sense of it all, to find […]
August 9, 2016
UK tops European charts … for carder fraud
August 9, 2016
Risk High Date Discovered August 9, 2016 Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will […]
August 9, 2016
Risk High Date Discovered August 9, 2016 Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will […]
August 9, 2016
Risk Medium Date Discovered August 9, 2016 Description Microsoft Internet Explorer is prone to a local information-disclosure vulnerability. An authenticated attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Internet Explorer 10 and 11 are vulnerable. Recommendations Permit local access for trusted individuals only. Where possible, use restricted environments […]
August 9, 2016
Risk Medium Date Discovered August 9, 2016 Description Microsoft Internet Explorer and Edge are prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Edge and Internet explorer 9, 10 and 11 are vulnerable. Technologies Affected Microsoft Edge Microsoft Internet Explorer 10 Microsoft Internet Explorer […]
August 9, 2016
Risk Medium Date Discovered August 9, 2016 Description Microsoft Internet Explorer and Edge are prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Edge and Internet explorer 9, 10 and 11 are vulnerable. Technologies Affected Microsoft Edge Microsoft Internet Explorer 10 Microsoft Internet Explorer […]
August 9, 2016
Risk Medium Date Discovered August 9, 2016 Description Microsoft Internet Explorer and Edge are prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Edge and Internet explorer 9, 10 and 11 are vulnerable. Technologies Affected Microsoft Edge Microsoft Internet Explorer 10 Microsoft Internet Explorer […]
August 9, 2016
Risk High Date Discovered August 9, 2016 Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed […]
August 9, 2016
Risk High Date Discovered August 9, 2016 Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 […]
August 9, 2016
Risk High Date Discovered August 9, 2016 Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 […]
August 9, 2016
Risk High Date Discovered August 9, 2016 Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 […]
August 9, 2016
Even Solar Panels Can Be Hacked
August 8, 2016
Big Red alert: Oracle’s MICROS payment terminal biz hacked
August 8, 2016
Breach Forces Password Change on Oracle MICROS PoS Customers
August 8, 2016
We all know that Internet of Things (IoT) is the future and that everything from your refrigerator to your toaster may eventually connect to the internet. With that being the case, it’s important to remember that these connected devices need to be designed with security in mind. On Saturday at the Def Con hacking conference in […]
August 8, 2016
Malware Infected PokémonGo Apps Found on GooglePlay Store
August 8, 2016
ProjectSauron APT On Par With Equation, Flame, Duqu
August 8, 2016
Risk Level: Very Low. Type: Trojan.
August 8, 2016
How to pick a lock
August 8, 2016
Tor can be cracked “like eggshells”, warns US judge
August 8, 2016
Bitfinex asks users to share losses of bitcoin theft
August 8, 2016
PCs’ PCs pwned: Irish cops probe mystery malware attack
August 8, 2016
iOS 9.3.4 Patches Critical Code Execution Flaw
August 8, 2016
Brit network O2 hands out free Windows virus with USB pens
August 8, 2016
Eye of Sauron-themed trojan targets Russia, Sweden
August 8, 2016
Monday review – the hot 19 stories of the week
August 8, 2016
How to spear-phish Twitter users with greater success
August 8, 2016
Broken BitBank Bitfinex shaves 36% from all accounts
August 8, 2016
Video surveillance recorders riddled with zero-days
August 7, 2016
Andreas Cord-Landwehr discovered that kde4libs, the core libraries for all KDE 4 applications, do not properly handle the extraction of archives with “../” in the file paths. A remote attacker can take advantage of this flaw to overwrite files outside of the extraction folder, if a user is tricked into extracting a specially crafted archive. […]
August 7, 2016
24 Funny, Upsetting and Shocking Hacked Traffic Signs
August 7, 2016
Apple rushes out iOS update, shuts out jailbreakers
August 6, 2016
What Facebook plans to do next will SHOCK you!!!
August 6, 2016
Bitcoin robber offers $600K “giveaway”
August 6, 2016
Mr. Robot eps2.3logic-b0mb.hc – the security review
August 6, 2016
Kazakhstan accused of hacking journos, activists by EFF
August 6, 2016
Phisherfolk phlock to Rio for the Olympics
August 6, 2016
World’s largest bitcoin-dollar exchange robbed
August 6, 2016
Ubuntu: 3046-1: LibreOffice vulnerability Posted by Anthony Pell LibreOffice could be made to crash or run programs as your login if itopened a specially crafted file. ========================================================================== Ubuntu Security Notice USN-3046-1 August 04, 2016 libreoffice vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: – Ubuntu 12.04 LTS Summary: LibreOffice […]
August 6, 2016
Never Trust a Found USB Drive, Black Hat Demo Shows Why
August 6, 2016
Debian: 3641-1: openjdk-7: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3641-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff August 04, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : openjdk-7 CVE ID : CVE-2016-3458 CVE-2016-3500 CVE-2016-3508 CVE-2016-3550 CVE-2016-3606 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in […]
August 6, 2016
Apple Launches Bug Bounty with Maximum $200,000 Reward
August 6, 2016
Lack of Encryption Leads to Large Scale Cookie Exposure
August 6, 2016
Risk management: Picking the right tool for the job
August 6, 2016
Black Hat 2016 wrap-up: Same stuff, different year?
August 6, 2016
Red Hat: 2016:1573-01: squid: Moderate Advisory Posted by Anthony Pell An update for squid is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which [More…] ===================================================================== Red Hat Security Advisory Synopsis: […]
August 6, 2016
How Bugs Lead to a Better Android
August 6, 2016
Miller, Valasek Deliver Final Car Hacking Talk
August 6, 2016
Apple’s bug bounty program favors quality over quantity
August 6, 2016
Debian: 3640-1: firefox-esr: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3640-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff August 03, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : firefox-esr CVE ID : CVE-2016-2830 CVE-2016-2836 CVE-2016-2837 CVE-2016-2838 CVE-2016-5252 CVE-2016-5254 CVE-2016-5258 CVE-2016-5259 CVE-2016-5262 CVE-2016-5263 CVE-2016-5264 CVE-2016-5265 Multiple security issues have been found in the Mozilla […]
August 6, 2016
Hacking Hotel Keys and Point of Sale Systems at DEFCON
August 6, 2016
The advanced security techniques of criminal hackers
August 6, 2016
Never Trust a Found USB Drive, Black Hat Demo Shows Why
August 6, 2016
Why some risk assessments fail
August 6, 2016
Discovered: August 4, 2016 Updated: August 5, 2016 3:38:31 PM Type: Trojan, Virus Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 8, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP SONAR.BC.CryptDrop!g4 is a heuristic detection to detect suspicious programs that might drop known […]
August 6, 2016
Social engineering tricks and why CEO fraud emails work
August 6, 2016
Joshua Drake on Android Security Post-Stagefright
August 6, 2016
Risk Level: Very Low. Type: Trojan, Virus, Worm.
August 6, 2016
Debian: 3639-1: wordpress: Summary Posted by Anthony Pell Security Report Summary – ————————————————————————- Debian Security Advisory DSA-3639-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 03, 2016 https://www.debian.org/security/faq – ————————————————————————- Package : wordpress CVE ID : CVE-2015-8834 CVE-2016-5832 CVE-2016-5834 CVE-2016-5835 CVE-2016-5837 CVE-2016-5838 CVE-2016-5839 Several vulnerabilities were discovered in wordpress, a web blogging tool, which could allow remote […]
August 6, 2016