Security News

Thunderstrike 2 OS X Firmware Attack Self-Replicates to Peripherals (Threatpost)
2015-08-03 17:51

At Black Hat, researchers are expected to disclose new firmware attacks that work against OS X and self replicated to Thunderbolt peripherals.

EFF, AdBlock and Others Launch New Do Not Track Standard (Threatpost)
2015-08-03 15:14

After years of discussions, disagreements, and digressions, the Do Not Track header is supported by all of the major browsers. But because there’s no real requirement for sites or advertisers to...

Windows 10 Upgrade Spam Carries CTB-Locker Ransomware (Threatpost)
2015-08-03 14:24

Spam messages spoofing Microsoft and promising a free Windows 10 upgrade instead drop the CTB-Locker crypto-ransomware on compromised machines.

Unusual Re-Do of US Wassenaar Rules Applauded (Threatpost)
2015-07-31 16:56

The U.S. Commerce Department this week agreed to rewrite the proposed U.S. implementation of the Wassenaar Arrangement, a decision lauded by security experts.

Threatpost News Wrap, July 31, 2015 (Threatpost)
2015-07-31 15:51

Dennis Fisher and Mike Mimoso discuss the hacked sniper rifle, the huge Android bug in Stagefright, Samy Kamkar’s OwnStar device, and the joy and pain of next week’s Black Hat conference.

FBI Warns of Increase in DDoS Extortion Scams (Threatpost)
2015-07-31 15:26

Online scammers constantly are looking for new ways to reach into the pockets of potential victims, and the FBI says it is seeing an increase in the number of companies being targeted by scammers...

Xen Patches VM Escape Flaw (Threatpost)
2015-07-31 13:21

The Xen Project has patched a serious vulnerability that could allow an attacker in a guest virtual machine to escape and gain the ability to run arbitrary code on the host machine. The...

Cisco Fixes DoS Vulnerability in ASR 1000 Routers (Threatpost)
2015-07-30 18:55

Cisco has patched a denial-of-service vulnerability in its ASR 1000 line of routers, a bug that’s caused by an issue with the way the routers handle some fragmented packets. The company said the...

Writing Advanced OS X Malware an ‘Elegant’ Solution to Improving Detection (Threatpost)
2015-07-30 17:56

OS X security researcher Patrick Wardle is expected at Black Hat to demonstrate how to write advanced Mac malware, including Gatekeeper and Xprotect bypasses, in hopes of raising awareness to the...

Moonpig Warns Customers of ‘Security Issue’ (Threatpost)
2015-07-30 15:33

Moonpig has warned customers that some of their email addresses, passwords, and account balances have been published after what it calls a “security issue”. The company, which sells custom...