Major French news sites victim of DDoS attack
2017-05-12
Major news sites in France including Le Monde and Le Figaro went down yesterday in the fallout of a DDoS attack. Many of the biggest French news sites were hitRead More →
Telefonica Tells Employees to Shut Down Computers Amid Massive Ransomware Outbreak
2017-05-12
A ransomware outbreak is wreaking havoc all over the world, but especially in Spain, where Telefonica — one of the country’s biggest telecommunications companies — has fallen victim, and itsRead More →
OnePlus OTAs: Analysis & Exploitation
2017-05-12
In this blog post we present new trivial vulnerabilities found on OnePlus One/X/2/3/3T OxygenOS & HydrogenOS. They affect the latest versions (4.1.3/3.0) and below. The vulnerabilities allow for a Man-in-the-MiddleRead More →
Exploiting the Linux kernel via packet sockets
2017-05-12
Lately I’ve been spending some time fuzzing network-related Linux kernel interfaces with syzkaller. Besides the recently discovered vulnerability in DCCP sockets, I also found another one, this time in packetRead More →
Edge Security Flaw Allows Theft of Facebook and Twitter Credentials
2017-05-11
Argentinean security researcher Manuel Caballero has discovered another vulnerability in Microsoft’s Edge browser that can be exploited to bypass a security protection feature and steal data such as passwords fromRead More →
Linux and Other Open Source Technologies Protect Online Privacy: Snowden
2017-05-11
Short Bytes: At the OpenStack Summit, the ex-NSA contractor talked about the downsides of proprietary software and their threat to people’s privacy. Snowden promotes the use of open source softwareRead More →
Keylogger Found in Audio Driver of HP Laptops
2017-05-11
The audio driver installed on some HP laptops includes a feature that could best be described as a keylogger, which records all the user’s keystrokes and saves the information toRead More →
Sednit adds two zero-day exploits using ‘Trump’s attack on Syria’ as a decoy
2017-05-11
The Sednit group, also known as APT28, Fancy Bear and Sofacy, is a group of attackers operating since at least 2004 and whose main objective is to steal confidential informationRead More →
SESSION HIJACKING, COOKIE-STEALING WORDPRESS MALWARE SPOTTED
2017-05-11
Researchers have identified a strain of cookie stealing malware injected into a legitimate JavaScript file, that masquerades as a WordPress core domain. Cesar Anjos, a security analyst at Sucuri, aRead More →
iCloud Keychain vulnerability allowed hackers to Steal sensitive data
2017-05-10
Apple has recently fixed an iCloud Keychain vulnerability that could have been exploited by hackers to steal sensitive data from iCloud users. The flaw allowed hackers to run man-in-the-middle (MitM)Read More →
RSAUtil Ransomware (.helppme@india.com) Installed Via Hacked Remote Desktop Services
2017-05-10
Today we are going to take a quick look at a new ransomware called RSAUtil that was discovered by Emsisoft malware researcher xXToffeeXx. RSAUtil is distributed by the developer hacking into remote desktop servicesRead More →
News Brief: BitKangoroo Ransomware Deletes Your Files If You Do not Pay
2017-05-10
I am trying something new where I will post in brief articles about new ransomware as they are released. Many of these ransomware infections do not warrant a full article, butRead More →
Cisco patches switch hijacking hole – the one exploited by the CIA
2017-05-10
Telnet security flaw fix finally lands – or just use SSH, yeah? Cisco has patched a critical security flaw in its switches that can be potentially exploited by miscreants toRead More →
San Bernardino iPhone Hack: U.S. Senator Reveals How Much the FBI Spent on It
2017-05-09
Despite the information being deemed classified, the number is now out thanks to Senator Feinstein’s mistake. The FBI won’t reveal how exactly it managed to break into the iPhone ofRead More →
HIKVISION PATCHES BACKDOOR IN IP CAMERAS
2017-05-09
Hikvision, a Chinese manufacturer of video surveillance equipment, recently patched a backdoor in a slew of its cameras that could have made it possible for a remote attacker to gainRead More →
NemeS1S RaaS Is PadCrypt Ransomware’s Affiliate System
2017-05-09
A portal hidden on the Dark Web is responsible for the small deluge of recent PadCrypt ransomware versions that have been spotted almost on a monthly basis in the pastRead More →
Malwaresearch – A command line tool to find malware on Openmalware.org
2017-05-09
Malwaresearch is a command line tool to find malware on Openmalware.org, it was developed to facilitate and speed up the process of finding and downloading malware samples. The tool was developed toRead More →
Snake malware ported from Windows to Mac
2017-05-08
Snake, also known as Turla and Uroburos, is backdoor malware that has been around and infecting Windows systems since at least 2008. It is thought to be Russian governmental malwareRead More →
Google Project Zero team the worst Windows RCE vulnerability in recent memory
2017-05-08
Hackers at the Google Project Zero team have discovered another critical Windows RCE vulnerability, the worst Windows RCE in recent memory. Security experts at Google Project Zero team have discoveredRead More →
FrozrLock Ransomware Advertised on the Dark Web As “Great Security Tool”
2017-05-08
A new Ransomware-as-a-Service has become available on the Dark Web, named FrozrLock, available for only $220, and advertised under the tagline of “great security tool that encrypts most of yourRead More →
