Security News > 2017 > August

Decryption key for Apple iOS Secure Enclave Processor firmware revealed (Help Net Security)
2017-08-18 15:43

A hacker that goes by the handle “xerub” has apparently figured out the decryption key for Apple’s Secure Enclave Processor (SEP) firmware, and made it available online: key is fully grown...

Attackers turn to auto-updating links instead of macros to deliver malware (Help Net Security)
2017-08-18 15:15

SANS ISC handler Xavier Mertens has flagged and analyzed a malicious Word file that, somehow, is made to automatically download an additional malicious RTF file, ultimately leading to a RAT...

SyncCrypt Ransomware Hides Components in Image Files (Security Week)
2017-08-18 15:02

A newly discovered piece of ransomware hides its components inside online harmless-looking images that don’t trigger anti-virus detection. read more

Healthcare Providers Warned of Flaws in Philips Product (Security Week)
2017-08-18 14:53

The U.S. Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) and Philips have warned healthcare providers that one of the company’s radiation dose management tools is affected by...

Threatpost News Wrap, August 18, 2017 (Threatpost)
2017-08-18 13:30

Mike Mimoso and Tom Spring discuss this week's security news, including a discussion on recent hijacking of popular Chrome extensions and Adobe's decision to end-of-life Flash Player.

CISO Perspective: Process is Key to Your Threat Intelligence Program (Security Week)
2017-08-18 13:22

Continuing our examination of the cyber threat intelligence mind map, we move from the different levels of threat intel (Strategic, Operational read more

New infosec products of the week​: August 18, 2017 (Help Net Security)
2017-08-18 13:00

New Firebox M Series appliances help SMBs keep up with encrypted traffic WatchGuard Technologies announced hardware upgrades to its Firebox M Series to handle the proliferation of encrypted web...

Philips to Fix Vulnerabilities in Web-Based Health App (InfoRiskToday)
2017-08-18 12:48

Hard-Coded Credentials Could Lead to Patient DataPhilips plans to fix alarming vulnerabilities in a web-based application used to track patient radiation exposure. Versions of the DoseWise Portal...

Three barriers to digital IDs on the blockchain (Help Net Security)
2017-08-18 12:45

There has been a lot of hype around blockchain technology and the benefits it could potentially bring to a wide variety of verticals, including identity verification. While the benefits are...

How security pros look at encryption backdoors (Help Net Security)
2017-08-18 12:30

The majority of IT security professionals believe encryption backdoors are ineffective and potentially dangerous, with 91 percent saying cybercriminals could take advantage of government-mandated...