Security News

Mac malware steals cryptocurrency exchange cookies, text messages for 2FA authentication
2019-01-31 14:25

The CookieMiner malware attempts to extract credentials for cryptocurrency wallets and exchanges, as well as stored password and credit card information.

Privilege escalation vulnerability uncovered in Microsoft Exchange
2019-01-30 12:25

A researcher has discovered an alarming way that an attacker controlling a Microsoft Exchange mailbox account could potentially elevate their privileges to become a Domain Administrator.

Researcher Escalates Privileges on Exchange 2013 via NTLM Relay Attack
2019-01-29 15:20

Microsoft Exchange 2013 and newer versions allow an attacker to escalate privileges when performing a NT LAN Manager (NTLM) relay attack, a security researcher warns. read more

You're an admin! You're an admin! You're all admins, thanks to this Microsoft Exchange zero-day and exploit
2019-01-25 00:31

Easily swapped hashed passwords gives Domain Admin rights via API call. Fix may land next month Microsoft Exchange appears to be currently vulnerable to a privilege escalation attack that allows...

EU-Japan Deal to Protect Data Exchanges Takes Effect
2019-01-23 17:39

The European Union and Japan on Wednesday launched the "world's largest areas of safe data flows" after finalizing common rules to protect personal information, the EU said. Firms can transfer...

Endace joins IBM Security app exchange community
2019-01-16 03:00

Endace launched the EndaceProbe integration with IBM Security to enable customers to retrace the actions of an attacker to accelerate forensic investigation. EndaceProbe Network Analytics Platform...

Trading site DX.Exchange spills gobs of user data
2019-01-11 10:59

A trader believes he could easily have obtained admin access to the site and potentially have stolen the funds of its 600,000 users.

Welcome to 2019: Your Exchange server can be pwned by an email (and other bugs need fixing)
2019-01-08 23:28

Plus, bonus shock: Adobe spares Flash in January patch dump Microsoft has released the first Patch Tuesday bundle of the year, patching up 49 CVE-listed security vulnerabilities and issuing two...

Hacked Mt. Gox Bitcoin Exchange Chief Maintains Innocence
2018-12-28 14:03

Prosecutors in Japan Seek 10-Year Embezzlement Sentence for Mark KarpelesMark Karpeles, the former head of hacked Tokyo-based bitcoin exchange Mt. Gox, has continued to maintain his innocence...

Asavie joins MaaS360 Community on IBM Security App Exchange
2018-12-11 03:00

Asavie has joined IBM’s MaaS360 App Exchange ecosystem of partners. Asavie complements IBM MaaS360 to provide enterprises with a defense-in-depth approach to managing their mobile fleet of devices...