Web Cache Deception Attack
2017-02-28
A few words about caching and reactions Websites often tend to use web cache functionality (for example over a CDN, a load balancer, or simply a reverse proxy). The purposeRead More →
Stolen EHR data is flooding criminal underground communities in the Deep Web
2017-02-27
EHR data are precious commodities in the cyber criminal underground because of the lack of cyber security of healthcare industry. Electronic health record databases are becoming the most precious commoditiesRead More →
Vulnerability Deep Dive – Ichitaro Office Excel File Code Execution Vulnerability
2017-02-25
Vulnerabilities in word processing and office productivity suites are useful targets for exploitation by threat actors. Users frequently encounter file types used by these software suites in their day toRead More →
Malware Uses Blinking Hard Drive LEDs to Transmit Data to Nearby Cameras
2017-02-23
Custom-made malware installed on an offline computer can use a hard drive’s LED to send out sensitive data from infected computers to nearby cameras. This Hollywood hacking scenario is nowRead More →
New macOS Patcher Ransomware Locks Data for Good, No Way to Recover Your Files
2017-02-23
A newly discovered ransomware family calling itself Patcher is targeting macOS users, but according to security researchers from ESET, who discovered the ransomware last week, Patcher bungles the encryption processRead More →
DomainMonster mash: Hundreds of websites vandalized after Brit web host server hacked
2017-02-22
Small biz wakes up to find online homes defaced. Hundreds of websites have been defaced by hackers who hijacked a web-hosting server run by UK domain registrar DomainMonster. The index.phpRead More →
Revisiting Windows Security Hardening Through Kernel Address Protection
2017-02-22
Back in 2011 when Windows 7 Service Pack 1 was king of the hill and I was just starting to learn to program (via Harvard’s epic CS50), j00ru published aRead More →
ISIS Supporters Targeted with Android OmniRAT Malware
2017-02-16
Islamic State supporters are being targeted with a modified version of the Telegram Android app that contains a version of the OmniRAT remote access toolkit. The app, named plus_gram.apk, isRead More →
Attacking JavaScript Web Service Proxies with Burp
2017-02-16
JavaScript Web Service Proxies are an alternative to WSDL (Web Services Description Language) files for interacting with WCF Web Services. The proxy files function as a description of the webRead More →
New Android trojan mimics user clicks to download dangerous malware
2017-02-14
Android users have been exposed to a new malicious app imitating Adobe Flash Player that serves as a potential entrance for many types of dangerous malware. The application, detected byRead More →
