Security News > 2017 > December

Fortinet's FortiClient Product Exposed VPN Credentials
2017-12-14 11:34

Updates released by Fortinet for its FortiClient product patch a serious information disclosure vulnerability that can be exploited to obtain VPN authentication credentials. read more

Zero-Day Remote 'Root' Exploit Disclosed In AT&T DirecTV WVB Devices
2017-12-14 09:33

Security researchers have publicly disclosed an unpatched zero-day vulnerability in the firmware of AT&T DirecTV WVB kit after trying to get the device manufacturer to patch this easy-to-exploit...

Traffic to Major Tech Firms Rerouted to Russia
2017-12-14 09:22

Internet traffic for some of the world’s largest tech firms was briefly rerouted to Russia earlier this week in what appeared to be a Border Gateway Protocol (BGP) attack. read more

U.S. Prosecutors Confirm Uber Target of Criminal Probe
2017-12-14 03:11

A letter made public Wednesday in Waymo's civil suit against Uber over swiped self-driving car secrets confirmed the ride-share service is the target of a US criminal investigation. read more

U.S. Military to Send Cyber Soldiers to the Battlefield
2017-12-14 02:38

The US Army will soon send teams of cyber warriors to the battlefield, officials said Wednesday, as the military increasingly looks to take the offensive against enemy computer networks. read more

Security is Not a Technology Profession
2017-12-13 21:19

Security is not a technology profession. Or at least it shouldn’t be, I would argue. If this sounds like a provocative statement to you, then I am doing my job well. In the end, though, once I’ve...

Three Plead Guilty in Mirai Botnet Attacks
2017-12-13 20:55

US officials unveiled criminal charges Wednesday against a former university student and two others in the Mirai botnet attacks which shut down parts of the internet in several countries starting...

19-Year-Old TLS Vulnerability Weakens Modern Website Crypto
2017-12-13 19:33

New research shows how an old vulnerability called ROBOT can be exploited using an adaptive chosen-ciphertext attack to reveal the plaintext for a given TLS session.

New Spider Ransomware Emerges
2017-12-13 18:14

A new ransomware family discovered when analyzing a mid-scale campaign that started over the weekend uses decoy documents auto-synced to enterprise cloud storage and collaborations apps, security...

Greek Court Orders Extradition of Russian Bitcoin Suspect to US
2017-12-13 17:55

Greece's Supreme Court on Wednesday ordered that a Russian accused of laundering $4 billion using bitcoin digital currency be extradited to the United States, a court source said. read more