February 17, 2016
Apple will oppose court order rather than hack customers
Massive US-planned cyberattack against Iran went well beyond Stuxnet
February 17, 2016
U.S. Encryption Ban Would Force Companies To Migrate, Say Researchers
February 17, 2016
Monitor Server Logs in Real-Time with “Log.io” Tool
February 17, 2016
New Survey Suggests U.S. Encryption Ban Would Just Send Market Overseas
February 17, 2016
New report contends mandatory crypto backdoors would be futile
February 17, 2016
New bipartisan bill would prevent states from weakening encryption
February 17, 2016
Discovered: February 17, 2016 Updated: February 17, 2016 7:21:42 PM Type: Trojan Systems Affected: Windows 7, Windows Vista, Windows XP Backdoor.Cloworm is a Trojan horse that opens a back door on the compromised computer. It may also download potentially malicious files. Antivirus Protection Dates Initial Rapid Release version February 17, 2016 revision 033 Latest Rapid […]
February 17, 2016
February 17, 2016
February 17, 2016
February 17, 2016
February 17, 2016
5 steps to make threat intelligence work for you
Imagine your friend’s house is broken into over and over. Each time the intruder gains entry by smashing a window. In response, your friend notices that his door locks aren’t Bluetooth-enabled or biometric, so he buys intelligent door locks for his house. He is surprised, over and over, that no matter how much he upgrades […]
February 17, 2016
Why patching is still a problem — and how to fix it
Despite warnings from people like me, unpatched software is the top reason computers get exploited. People aren’t too dumb or lazy to install patches. They want to do the right thing. But patching can be difficult for a multitude of reasons, and those roadblocks explain why patching is performed so poorly in most organizations. Let’s walk […]
February 17, 2016
Why you don’t need an RFID-blocking wallet
Because I’m a computer security guy, I have friends who like to show off their new RFID-blocking wallets and purses. “Look what I got for Christmas!” they say. My lack of response should be telling, but they don’t seem to pick up on it. They’ve seen the TV ads about malicious hackers who can “stand […]
February 17, 2016
Train your users to beat phone scams
As I landed in Dallas returning from my recent visit to China, I picked up my cellphone voicemails. One of them was from my bank, telling me my personal debit card was frozen and would have to be unlocked. I knew I should’ve let my bank and credit card companies know I was traveling, but […]
February 17, 2016
A better way to move past insecure SHA-1 certs
I’ve written a few times about the pending mini-Y2K issue that is SHA-1 deprecation. In a nutshell, all digital certificates are signed by a hashing algorithm — and SHA-1 is the signature type used by almost everyone. But SHA-1 has significant cryptographic weaknesses, which is why the crypto world has recommended for years that digital […]
February 17, 2016
How computer security changed in 2015
You can call me a pundit, I guess, but I don’t like making predictions. Most industry forecasts are horribly inaccurate and miss the stuff people will care about a year later. For me, it’s hard enough to digest what happened in the past and make sense of it, but this was a landmark year. Here […]
February 17, 2016
Why identity is the new security
Security boundaries in the IT world are changing, porous, often imaginary lines. A security boundary is a demarcation that delineates sovereign or administrative borders that dictate who controls what. Boundary owners are supposed to protect the assets inside their domains against all other unauthorized incursions. Security boundaries are important. Nearly every war is fought over […]
February 17, 2016
2016 data breach blotter: The damage so far
February 17, 2016
Successful network defense requires a change in thinking
February 17, 2016
Sony attackers thought to be behind multiple large attacks
February 17, 2016
US hospital hit with ’random’ ransomware attack
A hospital in the US is still unable to fully access its computer system, over a week after cybercriminals launched a ransomware attack. It has been reported that the individual(s) behind the attack at the Hollywood Presbyterian Medical Center, which is based in Los Angeles, California, have demanded 9,000 bitcoins (approximately $3.6 million) in return […]
February 17, 2016
The security review: Remtasu and Facebook cheat sheet
From an outbreak of malicious spyware to the UK’s bill on investigatory powers, here’s our comprehensive breakdown of cybersecurity news from the past week. Remtasu is disguised in Facebook hacking tool ESET’s Camilo Gutierrez Amaya reported how Remtasu, a well-known piece of spyware, which first surfaced almost four years ago, is now appearing in disguise […]
February 17, 2016
How malware moved the exchange rate in Russia
February 17, 2016
Prince Charming: The Valentine’s Day scammer
Online dating has transformed from being a modest, underused and ‘hush hush’ concept – with a pinch of embarrassment – to a mainstream, popular and transformative entity. As a Pew Research Center survey from 2013 revealed, it has “lost much of its stigma”. Looking for love in the 21st century? It’s possibly a click and […]
February 17, 2016
Calls from the UK to make ‘malicious data breaches’ a criminal offence
The UK government should make ‘malicious data breaches’ a criminal offence, according to a new report from the Science and Technology Committee. Its paper, titled The Big Data Dilemma, argues that fines alone are not enough of a punishment. Further, the committee highlighted its concern over big data techniques that can “re-identify” individuals “from previously […]
February 17, 2016
How to isolate VBS or JScript malware with Visual Studio
In recent years, the ESET Latin America Investigation Laboratory has witnessed a growth in malware developed using scripting languages. This is why we now want to demonstrate how to configure a dynamic analysis environment to isolate such threats so we can understand and observe their behavior in a controlled environment. What do we mean by […]
February 17, 2016
Several vulnerabilities have been fixed in the GNU C Library, glibc. The first vulnerability listed below is considered to have critical impact. CVE-2015-7547 The Google Security Team and Red Hat discovered that the glibc host name resolver function, getaddrinfo, when processing AF_UNSPEC queries (for dual A/AAAA lookups), could mismanage its internal buffers, leading to a […]
February 17, 2016
Several vulnerabilities have been fixed in the GNU C Library, eglibc. The CVE-2015-7547 vulnerability listed below is considered to have critical impact. CVE-2014-8121 Robin Hack discovered that the nss_files database did not correctly implement enumeration interleaved with name-based or ID-based lookups. This could cause the enumeration enter an endless loop, leading to a denial of […]
February 17, 2016
Holger Fuhrmannek discovered that missing input sanitising in the Graphite font rendering engine could result in the execution of arbitrary code. For the oldstable distribution (wheezy), this problem has been fixed in version 38.6.1esr-1~deb7u1. For the stable distribution (jessie), this problem has been fixed in version 38.6.1esr-1~deb8u1. For the unstable distribution (sid), this problem has […]
February 17, 2016
Several vulnerabilities have been found in PostgreSQL-9.4, a SQL database system. CVE-2016-0766 A privilege escalation vulnerability for users of PL/Java was discovered. Certain custom configuration settings (GUCs) for PL/Java will now be modifiable only by the database superuser to mitigate this issue. CVE-2016-0773 Tom Lane and Greg Stark discovered a flaw in the way PostgreSQL […]
February 17, 2016
Several vulnerabilities have been found in PostgreSQL-9.1, a SQL database system. CVE-2015-5288 Josh Kupershmidt discovered a vulnerability in the crypt() function in the pgCrypto extension. Certain invalid salt arguments can cause the server to crash or to disclose a few bytes of server memory. CVE-2016-0766 A privilege escalation vulnerability for users of PL/Java was discovered. […]
February 17, 2016
Daniel Genkin, Lev Pachmanov, Itamar Pipman and Eran Tromer discovered that the ECDH secret decryption keys in applications using the libgcrypt20 library could be leaked via a side-channel attack. See https://www.cs.tau.ac.IL/~tromer/ecdh/ for details. For the stable distribution (jessie), this problem has been fixed in version 1.6.3-2+deb8u1. For the unstable distribution (sid), this problem has been […]
February 17, 2016
Several vulnerabilities were discovered in the resolver in nginx, a small, powerful, scalable web/proxy server, leading to denial of service or, potentially, to arbitrary code execution. These only affect nginx if the resolver directive is used in a configuration file. For the oldstable distribution (wheezy), these problems have been fixed in version 1.2.1-2.2+wheezy4. For the […]
February 17, 2016
Two vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-2221 Shailesh Suthar discovered an open redirection vulnerability. CVE-2016-2222 Ronni Skansing discovered a server-side request forgery (SSRF) vulnerability. For the oldstable distribution (wheezy), these problems have been fixed in version 3.6.1+dfsg-1~deb7u10. For the stable distribution […]
February 17, 2016
Several vulnerabilities were discovered in qemu, a full virtualization solution on x86 hardware. CVE-2015-7295 Jason Wang of Red Hat Inc. discovered that the Virtual Network Device support is vulnerable to denial-of-service, that could occur when receiving large packets. CVE-2015-7504 Qinghao Tang of Qihoo 360 Inc. and Ling Liu of Qihoo 360 Inc. discovered that the […]
February 17, 2016
Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution on x86 hardware. CVE-2015-7295 Jason Wang of Red Hat Inc. discovered that the Virtual Network Device support is vulnerable to denial-of-service (via resource exhaustion), that could occur when receiving large packets. CVE-2015-7504 Qinghao Tang of Qihoo 360 Inc. and Ling Liu of Qihoo 360 Inc. […]
February 17, 2016
February 17, 2016
February 17, 2016
February 17, 2016
Discovered: February 15, 2016 Updated: February 16, 2016 3:26:08 PM Type: Trojan Infection Length: 229,645 bytes Systems Affected: Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Backdoor.Redsip is a Trojan horse that opens a back door on the compromised computer. It […]
February 17, 2016
Discovered: February 15, 2016 Updated: February 15, 2016 5:40:48 PM Type: Trojan Infection Length: Varies Systems Affected: Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Backdoor.Contopee is a Trojan horse that opens a back door on the compromised computer. It may […]
February 17, 2016
February 17, 2016
February 17, 2016
Discovered: February 12, 2016 Updated: February 12, 2016 7:53:04 PM Type: Trojan Systems Affected: Windows 2000, Windows 7, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Server 2008, Windows Vista, Windows XP Backdoor.Fimlis is a Trojan horse that opens a back door on the compromised computer and downloads potentially malicious files. […]
February 17, 2016
February 17, 2016
February 17, 2016
APPLE-SA-2016-01-19-3 Safari 9.0.3 Subject: APPLE-SA-2016-01-19-3 Safari 9.0.3 From: Apple Product Security <email@hidden> Date: Tue, 19 Jan 2016 15:48:17 -0800 —–BEGIN PGP SIGNED MESSAGE—– Hash: SHA512 APPLE-SA-2016-01-19-3 Safari 9.0.3 Safari 9.0.3 is now available and addresses the following: WebKit Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, OS X El Capitan v10.11 to v10.11.2 […]
February 17, 2016
APPLE-SA-2016-01-19-2 OS X El Capitan 10.11.3 and Security Update 2016-001 Subject: APPLE-SA-2016-01-19-2 OS X El Capitan 10.11.3 and Security Update 2016-001 From: Apple Product Security <email@hidden> Date: Tue, 19 Jan 2016 15:46:58 -0800 —–BEGIN PGP SIGNED MESSAGE—– Hash: SHA512 APPLE-SA-2016-01-19-2 OS X El Capitan 10.11.3 and Security Update 2016-001 OS X El Capitan 10.11.3 and […]
February 17, 2016
APPLE-SA-2016-01-19-1 iOS 9.2.1 Subject: APPLE-SA-2016-01-19-1 iOS 9.2.1 From: Apple Product Security <email@hidden> Date: Tue, 19 Jan 2016 15:43:37 -0800 —–BEGIN PGP SIGNED MESSAGE—– Hash: SHA512 APPLE-SA-2016-01-19-1 iOS 9.2.1 iOS 9.2.1 is now available and addresses the following: Disk Images Available for: iPhone 4s and later, iPod touch (5th generation) and later, iPad 2 and later […]
February 17, 2016
APPLE-SA-2016-01-07-1 QuickTime 7.7.9 Subject: APPLE-SA-2016-01-07-1 QuickTime 7.7.9 From: Apple Product Security <email@hidden> Date: Thu, 07 Jan 2016 17:40:44 -0800 —–BEGIN PGP SIGNED MESSAGE—– Hash: SHA512 APPLE-SA-2016-01-07-1 QuickTime 7.7.9 [Re-sending with a valid signature] QuickTime 7.7.9 is now available and addresses the following: QuickTime Available for: Windows 7 and Windows Vista Impact: Viewing a maliciously crafted […]
February 17, 2016
APPLE-SA-2016-01-07-1 QuickTime 7.7.9 Subject: APPLE-SA-2016-01-07-1 QuickTime 7.7.9 From: Apple Product Security <email@hidden> Date: Thu, 07 Jan 2016 16:07:02 -0800 —–BEGIN PGP SIGNED MESSAGE—– Hash: SHA512 APPLE-SA-2016-01-07-1 QuickTime 7.7.9 QuickTime 7.7.9 is now available and addresses the following: QuickTime Available for: Windows 7 and Windows Vista Impact: Viewing a maliciously crafted movie file may lead to […]
February 17, 2016
Risk High Date Discovered February 9, 2016 Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed […]
February 17, 2016
Risk High Date Discovered February 9, 2016 Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause […]
February 17, 2016
Risk High Date Discovered February 9, 2016 Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will […]
February 17, 2016
Risk High Date Discovered February 9, 2016 Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks […]
February 17, 2016
Risk High Date Discovered February 9, 2016 Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft […]
February 17, 2016
Risk High Date Discovered February 9, 2016 Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause […]
February 17, 2016
Risk Medium Date Discovered February 9, 2016 Description Microsoft ASP.NET is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform unauthorized actions in the context of a logged-in user of the affected application. This may aid in other attacks. Technologies Affected Microsoft ASP.NET MVC 5.0 Microsoft ASP.NET MVC 6.0 Microsoft […]
February 17, 2016
Risk Medium Date Discovered February 9, 2016 Description Microsoft Active Directory Federation Services is prone to a denial of service vulnerability. Successful exploits may allow the attacker to cause the server to become non-responsive, resulting in denial of service conditions. Technologies Affected Microsoft Active Directory Federation Services 3.0 Microsoft Windows Server 2012 R2 Recommendations Block […]
February 17, 2016
Risk High Date Discovered February 9, 2016 Description Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Internet Explorer 9, 10 and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer 10 Microsoft Internet Explorer 11 Microsoft Internet […]
February 17, 2016
Risk High Date Discovered February 9, 2016 Description Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Internet Explorer 9, 10 and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer 10 Microsoft Internet Explorer 11 Microsoft Internet […]
February 17, 2016
Selfie + money + Snapchat = robbed! Don’t flash your cash…
February 17, 2016
Follower: the “creepiest social network” that follows you in real life
February 17, 2016
Stung by stingrays: NYPD reveals over 1000 cellphone interceptions
February 17, 2016
Please vote for Naked Security in the 2016 Security Blogger Awards!
February 17, 2016
February 17, 2016
Many of you are probably familiar with VirusTotal, a service that allows you to scan a file or URL using multiple antivirus and URL scanners. VirusTotal results are often used in write-ups about new malware to show how widely a sample is detected by the AV community. We receive links to VirusTotal results via our […]
February 17, 2016
In a 2016 survey of 500 PC gamers, Webroot discovered statistically significant differences in the ways that male and female gamers approach internet security, 3rd party modifications, and the way they choose to portray their gender online. In fact, we found surprisingly large discrepancies between those who identified as male and those who identified as […]
February 17, 2016
A lot happens in the security world, some big and some small, and many stories get lost in the mix. In an effort to keep our readers informed and updated, we present the Webroot Threat Recap, highlighting 5 major security news stories of the week. U.S. Police Union Data Breach In the past week, a […]
February 17, 2016
Threat Intelligence has become common throughout the cyber security landscape used in traditional information technology platforms from next generation firewalls, application load balancers, SIEM and other threat monitoring and prevention tools. With the pervasive growth of IoT initiatives and concerns around how to protect operational infrastructures from malicious actors an understanding of how existing threat […]
February 17, 2016
Here at Webroot, we take security seriously. With that being said, there is always more that you can do to improve your security and privacy while browsing online. Below is a list of browser plugins that we recommend you check out. Webroot Filtering Extension This one is pretty much a given as we are Webroot. […]
February 17, 2016
A lot happens in the security world, some big and some small, and many stories get lost in the mix. In an effort to keep our readers informed and updated, we present the Webroot ThreatBrief, highlighting 5 major security news stories of the week. Indian Banks Hit with Ransomware Recently, several Indian banks were infiltrated […]
February 17, 2016
The IoT (Internet of Things) as a concept has been with us since the late 1990’s and has evolved from simple M2M (Machine-to-Machine) connectivity into a vision for Operational Productivity enabled by Interoperability. Innovation and investment in new IoT technology and business models are driven by the pursuit of key operational benefits such as Provisioning […]
February 17, 2016
When it comes to digital security, little is as important as knowing how to create a strong password. An ideal password is easy enough to remember so that it doesn’t need to be written down, yet complex enough to prevent someone else from guessing it. For many, this is a challenging and even frustrating experience, […]
February 17, 2016
IBM goes all in on blockchain, offers cloud-based service
February 16, 2016
Patch now! Unix bug puts Linux, Android, and iOS systems at risk
February 16, 2016
How to bypass this LG smartphone’s fingerprint security in just 30 seconds
��}�۶��o�*�ӧL))Q�H�a��ۉ����L�=��(�8���F3�qվ�>�V���>�v R�F��I�)�� 4��F��@?��������=’?��~����i�QgB�U}{F{ڥKc���u�iϡ���G�����gD#ۣ=�҄��G�ȍ�qICw��+�æ}�_���#�;���3Ǧ��Mp�r��~���뛏��U�cY����ǎ�ٰ��ϻ����v�s�u#��#�/bw���:d��S�A��Q�����$fdx�Q��ʫH4��8�2�>��h�Dd���VI�)�%��G1i5���Q]���Rۡ�(t��>!q��C���=������ԎȐR�������} ?Rr��*�>^k{��1�P�㓘����yl�m�d��wj$��As���}���’�0@�yġ�ħ$�/V��I���ٰ:�F���&ƥ�0�φ�:�$a����5WC�Q�H����q^
February 16, 2016
Hollywood hospital held to ransom by cybercrooks
February 16, 2016
Xen’s latest hypervisor updates are missing some security patches
February 16, 2016
Hackers To Demonstrate How To Hack An Offline Laptop
February 16, 2016
CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow
February 16, 2016
VTech warns users that sensitive information ‘may not be secure’
VTech has relaunched its online service Learning Lodge, but appears to have shirked responsibility regarding future data breaches. Back in late November 2015, it was revealed that approximately 10 million of its customers had been affected by a major data breach. Information that was accessed as a result of the incident included names, addresses, encrypted […]
February 16, 2016
Hackers & Cybercrime: How To Avoid Becoming A Victim
February 16, 2016