Security News

RAMBleed picks up Rowhammer, smashes DRAM until it leaks apps' crypto-keys, passwords, other secrets
2019-06-11 22:26

Boffins blast boards to boost bits Bit boffins from Australia, Austria, and the US have expanded upon the Rowhammer memory attack technique to create more dangerous variation called RAMBleed that...

Someone slipped a vuln into crypto-wallets via an NPM package. Then someone else siphoned off $13m in coins to protect it from thieves
2019-06-07 05:56

What a wild ride, eh Komodo? Blockchain biz Komodo this week said it had used a vulnerability discovered by JavaScript package biz NPM to take control of some older Agama cryptocurrency wallets to...

Mozilla returns crypto-signed website packaging spec to sender – yes, it's Google
2019-05-30 20:58

Ad giant's site slurping tech complicates web security model, could give more power to search engines and social networks, Firefox maker warns Mozilla has published a series of objections to web...

Chinese software nasty enslaves stadium-load of servers, puts them to work digging up digital dosh in crypto-mines
2019-05-30 09:04

Nanshou malware hijacked more than 50,000 MS-SQL boxes with rootkits More than 50,000 servers around the world have been infected with malware that installs crypto-coin-mining scripts and advanced...

Firefox Now Has Fingerprinting and Crypto-mining Protection
2019-05-21 20:33

Mozilla this week released Firefox 67 to the stable channel with improved protection against tracking and with fingerprinting and crypto-mining protection capabilities.  read more

Crypto-chaps on scam rap in a flap over Slack chat tap, want court case zapped: 'Attorney-client priv info' in messages
2019-05-01 21:16

Duo also ask for two-year delay in celeb-studded ICO trial Two men accused of running a cryptocurrency scam have asked for the entire case to be thrown out – because prosecutors may have...

Qualcomm chips leak crypto data from secure execution environment
2019-04-25 10:47

A vulnerability in Qualcomm chips could be exploited by attackers to retrieve encryption keys and sensitive information from the chipsets’ secure execution environment, NCC Group researchers have...

Google hits brand slam stamping AMP with more crypto glam
2019-04-18 08:03

All your URLs are belong to u On Tuesday Google renovated its Accelerated Mobile Pages (AMP) web publishing format, making it more secure with less Chocolate Factory branding - a change certain to...

Week in review: Employee cybersecurity essentials, ASUS attack, lessons learned from crypto hacks
2019-03-31 17:00

Here’s an overview of some of last week’s most interesting news and articles: Attackers compromised ASUS to deliver backdoored software updates Unknown attackers have compromised an update server...

Lessons learned from the many crypto hacks
2019-03-29 06:15

The one poignant lesson that crypto investors globally have learned over the years is that despite the immutable, impenetrable nature of the technology behind cryptocurrencies and blockchain,...