Security News > 2016

Nagios 4.2.4 closes serious root privilege escalation bug (Help Net Security)
2016-12-16 13:30

If you’re using Nagios to monitor your systems, networks and infrastructure, and you have not updated to version 4.2.4, you better hop to it. This latest release fixes a high severity root...

Malvertising campaign compromises routers instead of computers (Help Net Security)
2016-12-16 13:15

The DNSChanger exploit kit is back and more effective than ever, and is being used in a widespread malvertising attack whose goal is to compromise small/home office routers. According to...

Delayed breach notifications open door to regulatory fines (Help Net Security)
2016-12-16 13:00

As more data breaches occur everyday and more data privacy regulations come into force, such as EU GDPR, organizations are beginning to make data governance and data protection more of a priority....

Evernote employees will be able to read users’ notes (Help Net Security)
2016-12-16 12:45

Starting on January 23, 2017, Evernote users’ unencrypted notes will be accessible to some Evernote employees. The change to the service’s privacy policy was announced on Tuesday, and the...

Growth rates of cryptographic keys and certificates (Help Net Security)
2016-12-16 12:30

A new study conducted by Dimensional Research evaluated current and projected growth rates of cryptographic keys and digital certificates in the enterprise for 2016 and 2017. Study respondents...

Giving Up on PGP (Schneier on Security)
2016-12-16 11:36

Filippo Valsorda wrote an exellent essay on why he's giving up on PGP. I have long believed PGP to be more trouble than it is worth. It's hard to use correctly, and easy to get wrong. More...

Impressive Social Engineering Display (Schneier on Security)
2016-12-15 21:43

In this impressive lc7scxvKQOo">social-engineering display, a hacker convinces a cell phone tech support person to change an account password without being verified in any way....

DNSChanger Exploit Kit Hijacks Routers, Not Browsers (Threatpost)
2016-12-15 18:56

An exploit kit called DNSChanger is attacking routers, not browsers, through a malvertising campaign.

Microsoft, Google to Block Flash by Default in Edge, Chrome (Threatpost)
2016-12-15 18:46

Microsoft followed Google's lead and said it will soon block Flash Player by default in the Edge browser.

New sheriffs in town: No More Ransom (Help Net Security)
2016-12-15 16:00

A couple of months ago, Intel Security, Kaspersky Lab, Dutch National Police and Europol announced the No More Ransom initiative. Such an initiative was a true example of the term...