During the last week, Romanian authorities have arrested three individuals who are suspected of infecting computer systems by spreading the CTB-Locker (Curve-Tor-Bitcoin Locker) malware – a form of file-encrypting ransomware.Read More →
The company’s announcements came on the heels of the US government’s public accusation blaming the North Korean government for WannaCry. Facebook says it has discovered and banned some malicious accountsRead More →
Kaspersky has found what they deem as a jack of all trades malicious app they call Trojan.AndroidOS.Loapi. Like the Trojan AsiaHitGroup we discovered last month on Google Play, this malware can do all the things—it’sRead More →
A strain of Android malware found lurking on third-party application stores is so packed full of nefarious capabilities it can cause physical damage to smartphones. Security experts from Moscow-based anti-virusRead More →
Attackers bypass HTTPS encryption protection by registering new TLS certificate. A Dutch security firm recently fell victim to a well-executed attack that allowed hackers to take control of its serversRead More →
Ransomware attacks can cripple a business, leading to a rather sad trend in the industry.British companies are hoarding Bitcoin in order to pay off ransomware attacks capable of disrupting criticalRead More →
vBulletin, also known as vB, is a widespread proprietary Internet forum software package developed by vBulletin Solutions, Inc., based on PHP and MySQL database server. vBulletin powers many of theRead More →
About 16 months ago, a Google Project Zero researcher found a critical bug in a password manager named Keeper. The bug allowed Keeper to inject its trusted UI into untrustedRead More →
You can try it with your friends at work or with anyone that gives you access to a computer… it’s really funny but dangerous. I reported this issue to googleRead More →
Securely-developed apps may be at risk due to security issues in popular interpreted programming languages. Even software that has been built with secure development procedures may still be vulnerable toRead More →
THE FEDERAL COMMUNICATIONS Commission voted Thursday to dismantle its net neutrality regulations. But that won’t end the fight over rules that prohibit internet service providers from creating fast lanes for some content, whileRead More →
Mandiant recently responded to an incident at a critical infrastructure organization where an attacker deployed malware designed to manipulate industrial safety systems. The targeted systems provided emergency shutdown capability for industrialRead More →
In my post about how insecure AppLocker really are we concluded that the only valid bypass technique (from the 7 I tested) was actually msbuild.exe. The next question is, how can weRead More →
The flaw was privately disclosed to the device maker in June, but six months later, there’s still no patch. Homes signed up to AT&T’s DirecTV service may be inadvertently runningRead More →
Google, Facebook, Apple, and Microsoft all affected by “intentional” BGP mishap. Traffic sent to and from Google, Facebook, Apple, and Microsoft was briefly routed through a previously unknown Russian InternetRead More →
Two years ago in October 2015 we published a blogpost about a popular malware that was being distributed from the Google Play Store. Over the next two years we detected several similarRead More →
Netskope Threat Research labs has detected new ransomware named Spider propagating in a mid-scale campaign. This ongoing campaign, identified on the 10th December, uses decoy Office documents which usually arriveRead More →
Sites vulnerable to newly revived ROBOT exploit included Facebook and PayPal. A surprisingly big number of top-name websites—Facebook and PayPal among them—recently tested positive for a critical, 19-year-old vulnerability thatRead More →
Google’s elite team of hackers released a much-anticipated tool to help security researchers hack and jailbreak the iPhone. Google has released a powerful tool that can help security researchers hackRead More →
Researchers at Dell Secureworks are warning a vulnerability in two keyless entry products could allow local attackers to lock and unlock doors and create illegitimate RFID badges by sending unauthenticatedRead More →
