Security News

International Investigatory Group Also Target of Government Spyware (Threatpost)
2017-07-10 17:27

An international group of investigators were infected by Pegasus spyware while in Mexico, Citizen Lab reports.

Hard Rock, Loews Hotels Among Sabre Corp Hospitality Breach Victims (Threatpost)
2017-07-07 20:56

Victims of Sabre Corp's SynXis reservation system breach reportedly include both the Hard Rock Hotel and Casino chain and the Loews Hotel chain.

Leaky WWE Database Exposes Personal Data of 3M Wrestling Fans (Threatpost)
2017-07-07 16:32

Personal data of 3 million wrestling fans were left exposed on a database owned by World Wide Entertainment.

Decryption Key to Original Petya Ransomware Released (Threatpost)
2017-07-07 13:11

The key to decrypt the original Petya ransomware has been reportedly released by the ransomware’s author.

Let’s Encrypt to Offer Wildcard Certificates in 2018 (Threatpost)
2017-07-06 20:04

Certificate authority Let's Encrypt said this week it will begin offering wildcard certificates in 2018.

CopyCat Malware Infected 14M Android Devices, Rooted 8M, in 2016 (Threatpost)
2017-07-06 17:49

Over the course of two months last year the Copycat malware infected 14 million Android devices and rooted more than half of them, roughly eight million devices.

Google Patches Critical ‘Broadpwn’ Bug in July Security Update (Threatpost)
2017-07-06 16:30

The July Android Security Bulletin patches 11 critical remote-code execution bugs including one dubbed ‘Broadpwn’ that impacts both Android and iOS devices.

Threat Actors Target Chinese Language News Sites (Threatpost)
2017-07-05 18:56

Citizen Lab investigates the targeting of Chinese language news websites in a phishing attack that leveraged the NetWire remote access Trojan.

Libgcrypt ‘Sliding Right’ Attack Allows Recovery of RSA-1024 Keys (Threatpost)
2017-07-05 17:48

GnuPG recently patched cryptographic library Libgcrypt, preventing a local side-channel attack; something that could have allowed full key recovery for RSA-1024.

Researchers Find BlackEnergy APT Links in ExPetr Code (Threatpost)
2017-07-03 18:31

Researchers have found links between the BlackEnergy APT group and threat actors behind the ExPetr malware used in last month’s global attacks.