Security News > 2017 > September

‘HoeflerText’ Popups Target Browsers With RAT and Locky Ransomware (Threatpost)
2017-09-01 20:45

A malware campaign utilizing bogus “HoeflerText” popup warnings is back in full swing targeting Google Chrome and Firefox browsers with Locky ransomware attacks and the NetSupport Manager RAT.

Canadian university scammed out of $11.8 million (Help Net Security)
2017-09-01 17:37

MacEwan University in Edmonton, Alberta, is the latest confirmed victim of scammers. “On Wednesday, August 23, MacEwan University discovered it had been the victim of a phishing attack. A series...

Locky ransomware returns with new tricks up its sleeve (Help Net Security)
2017-09-01 16:01

Locky ransomware is back, again, delivered with the help of new tricks to fool users and anti-malware defenses. Massive spam campaign Delivered through one of the largest spam campaigns in H2 2017...

Threatpost News Wrap, September 1, 2017 (Threatpost)
2017-09-01 15:30

The Onliner spambot, Google's forthcoming Not Secure warnings for Chrome, the WireX botnet, Sarahah privacy and more are discussed.

The real cost of alarm fatigue (Help Net Security)
2017-09-01 14:55

One of the toughest challenges for an IT security team is managing and sifting through the deluge of security alerts that are created on a daily basis. Teams can waste considerable time chasing...

No Fix Planned For LabVIEW Bug, Says National Instruments (Threatpost)
2017-09-01 14:00

Researchers identified a vulnerability in National Instruments' LabVIEW software that will not receive patch by the vendor.

China-linked KHRAT Operators Adopt New Delivery Techniques (Security Week)
2017-09-01 13:49

A recently observed KHRAT remote access Trojan (RAT) infection campaign uses updated spear phishing, download and execution techniques, Palo Alto Networks security researchers warn. read more

Serious Vulnerabilities Disclosed in Modems Used by AT&T's U-verse Service (Security Week)
2017-09-01 13:44

Five vulnerabilities have been found in Arris-manufactured home networking equipment supplied in AT&T's U-verse service. The vulnerabilities are considered so trivial to exploit that they have...

Mozilla to Completely Ban WoSign, StartCom Certificates in Firefox 58 (Security Week)
2017-09-01 13:35

Mozilla this week announced plans to completely remove trust in the digital certificates issued by Chinese certificate authority WoSign and its subsidiary StartCom starting with Firefox 58.  read more

What’s the use of a privacy policy? (Help Net Security)
2017-09-01 13:25

In 2012 it was reported that “16% of Internet users claim to always read privacy policies of the sites and online services with which they share their private information”. I would probably...