Alisa Esage G (Page 97)

Working as a cyber security solutions architect, Alisa focuses on application and network security. Before joining us she held a cyber security researcher positions within a variety of cyber security start-ups. She also experience in different industry domains like finance, healthcare and consumer products.

New Dark Web Service Helps Crooks Trick You in Revealing Your Payment Card PIN

On: March 4, 2017

In: Important, Incidents, Vulnerabilities

A new service launched on the Dark Web this week simplifies the process of tricking victims whose card details have been exposed into revealing their card’s PIN. The service, whichRead More →

HackerOne Offers Free Bug Bounty Programs for Open Source Projects

On: March 3, 2017

In: Incidents, Vulnerabilities

HackerOne, a platform that is offering hosting for bug bounty programs, announced today that open-source projects can now sign up for a free bug bounty program if they meet aRead More →

Malware Leveraging PowerSploit

On: March 3, 2017

In: Malware

Hi again, this is Shusei Tomonaga from the Analysis Center. In this article, I’d like to share some of our findings about ChChes (which we introduced in a previous article)Read More →

Mike Pence used an AOL e-mail account for state business and it got hacked

On: March 3, 2017

In: Incidents

As a candidate, Trump VP castigated Clinton for use of a private e-mail server. As the US Republican vice presidential candidate, Mike Pence vigorously chastised Hillary Clinton for using aRead More →

Exploiting Android S-Boot: Getting Arbitrary Code Exec in the Samsung Bootloader (1/2)

On: March 3, 2017

In: Mobile Security, Vulnerabilities

Samsung’s Secure Bootloader (S-Boot) for Android lies at the heart of Samsung’s chain of trust concept. An attacker who compromises S-Boot could potentially load an untrusted kernel and system image,Read More →

Researchers uncover PowerShell Trojan that uses DNS queries to get its orders

On: March 3, 2017

In: Important, Incidents, Malware, Vulnerabilities

Delivered by “secure” Word doc, pure PowerShell malware fetches commands from DNS TXT records. Researchers at Cisco’s Talos threat research group are publishing research today on a targeted attack deliveredRead More →

Hidden backdoor discovered in Chinese IoT devices

On: March 2, 2017

In: Malware

Researchers at Trustwave have uncovered a backdoor in IoT devices from a Chinese manufacturer that could leave them open to exploitation. The backdoor is present in almost all devices producedRead More →

BlackArch Linux 2017-03-01 Hacking Distro Released With 50 New Tools And Kernel 4.9.11

On: March 2, 2017

In: Incidents, Vulnerabilities

Short Bytes: The developers of BlackArch ethical hacking distro have released the new ISO images of their operating system. BlackArch Linux 2017-03-01 is now available with 50 new hacking tools, Linux kernelRead More →

Online shops plundered by bank card-stealing malware after bungling backend Aptos hacked

On: March 2, 2017

In: Incidents, Malware

We were silenced by the Feds!’. Shoppers of 40 online stores have had their bank card numbers and addresses slurped by a malware infection at backend provider Aptos. The securityRead More →

Two new Mac backdoors discovered

On: March 1, 2017

In: Malware, Vulnerabilities

On Valentine’s Day, Mac users got a special “treat” in the form of new malware. Then, later that same week, there were signs of yet another piece of malware looming. These threatsRead More →

Google Helps News Sites Thwart DDoS Attacks

Massive Necurs Spam Botnet Now Equipped to Launch DDoS Attacks

On: March 1, 2017

In: Incidents

With more than one million active bots at any time, a Necurs-enabled DDoS attack could dwarf such an attack by the Mirai botnet. In an ominous development, the world’s largestRead More →

XSS flaws in Zscaler Cloud management software allow logged attackers to hack coworkers

On: March 1, 2017

In: Important, Incidents, Malware, Vulnerabilities

Zscaler has fixed persistent XSS vulnerabilities affecting Zscaler Cloud management software that allow logged attackers to hack coworkers. Serious cross-site scripting (XSS) flaws in the Zscaler Cloud management software could be exploitedRead More →

DRIDEX TROJAN GETS A MAJOR ‘ATOMBOMBING’ UPDATE

On: March 1, 2017

In: Malware

The Dridex banking Trojan has been updated and now sports a new injection method for evading detection based on the technique known as AtomBombing. Researchers with IBM X-Force identified the newRead More →

ESET antivirus cracks opens Apple Macs to remote root execution via man-in-middle diddle

On: March 1, 2017

In: Incidents, Vulnerabilities

Bored hacker looking for fun? We couldn’t possibly suggest you attack the latest vulnerability in ESET’s antivirus software, because it’s too basic to offer any challenge at all. As outlinedRead More →

Stuffed toys database left personal data exposed, says security expert

On: February 28, 2017

In: Incidents

Internet of Things database containing personal information was indexed by Shodan search engine. The database behind an internet-connected cuddly toy exposed the account information of over 800,000 users, while aRead More →

Critical SQL Injection Vulnerability Found in NextGEN Gallery WordPress Plugin

On: February 28, 2017

In: Vulnerabilities

The vulnerability can lead to attackers grabbing data from website database or user sensitive information. A new SQL Injection vulnerability was discovered in the NextGen Gallery plugin for WordPress, allowingRead More →

Web Cache Deception Attack

On: February 28, 2017

In: Important, Incidents, Malware, Vulnerabilities

A few words about caching and reactions Websites often tend to use web cache functionality (for example over a CDN, a load balancer, or simply a reverse proxy). The purposeRead More →

The Necurs botnet is evolving, now includes a DDoS module

On: February 28, 2017

In: Incidents, Malware

The Necurs botnet is evolving and recently the experts at BitSight’s Anubis Labs discovered that it was improved to launch DDoS attacks. The Necurs botnet continues to evolve and recentlyRead More →

DNS attacks: How they try to direct you to fake pages

On: February 27, 2017

In: Incidents, Vulnerabilities

DNS servers are essential to the normal functioning of the internet as we know and love it, but they tend to go unnoticed by most users. At least, that is, until someRead More →

Alisa Esage G (Page 97)

Cyber Security Channel