Security News

Crypto Innovator, Entrepreneur Jon Callas Rejoins Apple (Threatpost)
2016-05-24 21:41

Apple has hired cryptography pioneer Jon Callas for a third time. Callas, who previously at Apple helped design and implement encryption systems for Macs, was most recently at Silent Circle.

LinkedIn is Latest Contributor to Breach Fatigue (Threatpost)
2016-05-24 19:36

Expert Troy Hunt waxes on last week's LinkedIn data dump of 117 million credentials and how it reflects on a new breed of hackers.

FBI Mum on Real-World KeySweeper Attacks (Threatpost)
2016-05-24 15:29

The FBI warned its business partners of the risks associated with KeySweeper, a device hidden in a USB wall charger that sniffs keystrokes from Microsoft wireless keyboards.

Unraveling Turla APT Attack Against Swiss Defense Firm (Threatpost)
2016-05-23 21:33

Details of an extensive targeted attack against Swiss defense contractor RUAG were released by Switzerland's national CERT.

Persistent EITest Malware Campaign Jumps from Angler to Neutrino (Threatpost)
2016-05-23 17:08

The tenacious EITest malware campaign is being refueled by the fact it is shifting from the Angler exploit kit to the Neutrino exploit kit.

SWIFT Network Doubles Down on Security (Threatpost)
2016-05-23 15:30

SWIFT reminds banks of their responsibility in securing their access to the financial network, and creates a centralized information sharing resources for users.

Two Exploit Kits Spreading Attacks for Recent Flash Player Zero Day (Threatpost)
2016-05-23 14:04

Exploits for the most recent Adobe Flash Player zero-day vulnerability have been integrated into the Neutrino and Magnitude exploit kits

Microsoft Warns of Sneaky New Macro Trick (Threatpost)
2016-05-21 13:00

Microsoft warns of new technique to distribute macro malware that can evade standard virus detection, according to security experts.

Instagram Patches Brute-Force Authentication Flaws (Threatpost)
2016-05-20 19:15

Facebook paid researcher Arne Swinnen a $5,000 bounty for a pair of authentication vulnerabilities in Instagram that enabled brute-force attacks against usernames and passwords.

Google Allo a Clash of Privacy and Functionality (Threatpost)
2016-05-20 16:39

Google Allo has an end-to-end encryption capability powered by Signal, but it's not turned on by default because it would interfere with an artificial intelligence powering Google Assistant.