Hackers: We Will Remotely Wipe iPhones Unless Apple Pays Ransom
2017-03-21
“I just want my money,” one of the hackers said. A hacker or group of hackers is apparently trying to extort Apple over alleged access to a large cache ofRead More →
Twitter app spams Fappening bait and Amazon surveys
2017-03-21
With news of another so-called Fappening (nude photos of celebrities distributed without permission) doing the rounds, it was inevitable that scammers would look to take advantage. We’ve already seen message boardRead More →
The Polski-Vortex-Flotera Ransomware Connection
2017-03-21
A malware author that loves Polish hip hop music appears to be behind the Polski, Vortex, and Flotera (spelled Ŧl๏tєгค) ransomware families that have made a small number of victimsRead More →
Moodle – Remote Code Execution
2017-03-21
The vulnerability (CVE-2017-2641) allows an attacker to execute PHP code at the vulnerable Moodle server. This vulnerability actually consists of many small vulnerabilities, as described further in the blog post. MoodleRead More →
Big Surprise: Chinese PUPs Deliver Backdoored Drivers
2017-03-21
A driver secretly installed via PUPs packages for Chinese software contain backdoors enabling a third-party to load unsigned drivers or to execute code with higher privileges on a Windows machine.Read More →
Some Dark Web ‘Crackdowns’ Are Just Hot Air
2017-03-20
Law enforcement agencies across the world are targeting the dark web. Whether that’s through undercover buys of illegal weapons, or deploying malware to catch suspected pedophiles, cops have spent theRead More →
Cisco’s Investigation into Vault 7 Leak Uncovers 0-Day Affecting 318 Products
2017-03-20
Over 300 Cisco products are affected by a zero-day vulnerability Cisco discovered last week, and for which no patch is available at the time of writing. Cisco engineers discovered theRead More →
Attackers Leverage Excel, PowerShell and DNS in Latest Non-Malware Attack
2017-03-20
Increasingly, cyberattackers have been leveraging “non-malware” attack methods to target vulnerable organizations. Recently, the Carbon Black Threat Research Team was alerted about such an attack by a partner’s incident responseRead More →
New (but Old) Technique Hijacks User Sessions on All Windows Versions
2017-03-20
A security researcher has detailed a way to log into any account on the same computer, even without knowing its password. The trick works on all Windows versions, doesn’t requireRead More →
Former IT Admin Accused of Leaving Backdoor Account, Accessing It 700+ Times
2017-03-18
In another classic example of why you shouldn’t leaving your work laptop in the car, national security may have been compromised. An Oregon sportswear company is suing its former ITRead More →
