Security News > 2016 > December

International Phone Fraud Tactics (Schneier on Security)
2016-12-06 12:15

This article outlines two different types of international phone fraud. The first can happen when you call an expensive country like Cuba: My phone call never actually made it to Cuba. The...

Dirty Cow Vulnerability Patched in Android Security Bulletin (Threatpost)
2016-12-05 20:32

Today's Android Security Bulletin included a patch for the Dirty Cow vulnerability, a seven-year-old Linux bug that had yet to be patched by Google.

Google Debuts Continuous Fuzzer for Open Source Software (Threatpost)
2016-12-05 20:22

A new Google program OSS-Fuzz is aimed at continuously fuzzing open source software and has already detected over 150 bugs.

Voynich Manuscript Facsimile Published (Schneier on Security)
2016-12-05 20:20

Yale University Press has published a facsimile of the Voynich Manuscript. The manuscript is also available online....

Laws, regulations and contracts that infosec pros should be familiar with (Help Net Security)
2016-12-05 20:08

If you’re a white hat and you want to continue being one, knowing what laws and industry regulations allow or not allow (or require or not require) you to do is of crucial importance. It’s also a...

Distributed Guessing Attack Reels in Payment Card Data (Threatpost)
2016-12-05 19:10

A research paper describes vulnerabilities enabling distributed guessing attacks which allow an attacker to collect payment card data across a number of sites without triggering alerts.

New Large-Scale DDoS Attacks Follow Schedule (Threatpost)
2016-12-05 18:52

Researchers are tracking a new wave of DDoS attacks that rival Mirai when it comes to intensity and scope.

Disttrack wiper malware hits Saudi Arabia’s aviation agency (Help Net Security)
2016-12-05 17:42

Shamoon attackers with their Disttrack wiper malware have hit Saudi Arabian entities again. The Saudi government confirmed the latest breaches on Thursday, and for now the identity of only one...

EFF Blasts DEA in Ongoing Secret ‘Super Search Engine’ Lawsuit (Threatpost)
2016-12-05 14:00

EFF is dismayed by the cavalier attitude by law enforcement over warrantless searches of trillions of phone records and its refusal to turn over documents.

The global decline of cybersecurity confidence (Help Net Security)
2016-12-05 13:15

Tenable Network Security solicited insights from 700 security practitioners in nine countries and across seven industry verticals to calculate a global index score reflecting overall confidence...