Opera, which recently agreed to sell its browser business to a Chinese consortium, has reset user passwords for one of its services after its servers were breached by hackers this week. The companyRead More →
St. Jude Medical declares claim of vulnerability “false and misleading.” Trading in the stock of medical device manufacturer St. Jude Medical was halted Friday afternoon after a dramatic drop in itsRead More →
Exploiting server side bugs is a jackpot for hackers. Users tend to keep their data in one big pot – the server. This allows attackers to focus on one target,Read More →
The Domino Ransomware is a new infection discovered by Daniel Gallagher and Michael Gillespie that is based off of the Hidden Tear open-source ransomware project. What makes this variant interesting is that it pretendsRead More →
As the uptake of SSL grows, Tim Blombery, systems engineer at A10 Networks, said threat actors are increasingly leveraging SSL-based encryption to hide malicious activity. As usage of Secure SocketsRead More →
New MIME confusion attack mitigations added to Firefox 50. Starting with Firefox 50, the browser will feature improved mitigation against MIME confusion attacks, preventing a threat actor from disguising malicious codeRead More →
HTTPS and VPN traffic broken with new semi-practical attack. Two scientists from the French Institute for Research in Computer Science and Automation (INRIA) have published new research that details an attackRead More →
One of the most active banking Trojans that we have observed recently in email and exploit kits is one often referred to as Ursnif or Gozi ISFB [6]. Thanks toRead More →
Today, Apple released the iOS 9.3.5 out-of-band security update, which fixes vulnerabilities that allows attackers to remotely jailbreak an iPhone in order to to install spyware. First discovered by Citizen Laband Lookout, theseRead More →
Researchers at MIT’s artificial intelligence labs have developed new algorithms that could significantly boost bandwidth and network quality. Researchers at MIT claim to have created a network-boosting technology that couldRead More →
The Linux Trojan Linux.PNScan is back and it is actively targeting routers based on x86 Linux in an attempt to install backdoors on them. Yesterday I wrote about a new LinuxRead More →
Two hackers were able to steal email addresses and easily crackable passwords from three separate forums in this latest hack. Over 25 million accounts associated with forums hosted by RussianRead More →
More than 600 sites found to be vulnerable to demanding exploit called Sweet32. Researchers have devised a new attack that can decrypt secret session cookies from about 1 percent of theRead More →
Thailand – A gang of foreign criminals stole millions of baht by hacking ATMs in the country. The gang is linked the one that hacked ATMs in Taiwan. Hackers belongingRead More →
Victims of a ransomware campaign aimed at Dutch speakers don’t have to pay hackers after the No More Ransom project cracked its cipher. Victims of the Wildfire ransomware can getRead More →
We are not sure if this is going to be a new trend among browser hijackers, but it seems more than a coincidence that we found two browser hijackers usingRead More →
The Navis WebAccess application used in the transportation sector worldwide is affected by a high severity SQL injection vulnerability. A software used in the US ports is affected by aRead More →
During the last weeks we’ve been investigating multiple aspects of GSM security such as protocol vulnerabilities as well as source auditing the world’s most common open source software products thatRead More →
With only a small amount of work, ExtraBacon will commandeer new versions of ASA. Recently released code that exploits Cisco System firewalls and has been linked to the National Security AgencyRead More →
Researchers said a new variant of the Hancitor downloader has shifted tactics and adopted new dropper strategies and obfuscation techniques on infected PCs. Researchers at Palo Alto Networks are currently tracking the biggest pushRead More →
