Security News

Trump’s Cybersecurity Executive Order Under Fire (Threatpost)
2017-06-21 18:15

Former AT&T CSO, Ed Amoroso, says government needs to shift from talk to action when it comes to cybersecurity.

Honda Shut Down Plant Impacted by WannaCry (Threatpost)
2017-06-21 17:50

Carmaker Honda announced Wednesday that it was forced to shut down production at one of its Japanese plants earlier this week after it was hit by the WannaCry ransomware.

OpenVPN Patches Critical Remote Code Execution Vulnerability (Threatpost)
2017-06-21 15:14

OpenVPN patched four vulnerabilities privately disclosed by Dutch researcher Guido Vranken, including a critical issue that could lead to remote code execution.

Avaya Patches Remote Code Execution Flaw in Aura (Threatpost)
2017-06-21 13:00

Avaya released a patch last week for a remote code execution vulnerability in its Avaya Aura Application Enablement Services software.

TP-Link Fixes Code Execution Vulnerability in End-of-Life Routers (Threatpost)
2017-06-20 20:19

Router manufacturer TP-Link recently fixed a vulnerability in a discontinued line of routers that if exploited could have been used to execute code on the device.

Internet-Enabled Drill Demonstrates IoT Security Done Right (Threatpost)
2017-06-20 19:03

Researchers find flaws in an internet-connected drill, but say minimal, hard-to-find bugs indicate there is hope for IoT security.

University College London Ransomware Linked to AdGholas Malvertising Group (Threatpost)
2017-06-20 18:27

Proofpoint has connected the University College London ransomware to Mole, spread by AdGholas malvertising campaigns and the Astrum Exploit Kit.

ProtonMail Launches Free VPN Service (Threatpost)
2017-06-20 16:55

Encrypted email service ProtonMail announced it was launching its own VPN, ProtonVPN, on Tuesday.

Google Removes Two Ztorg Trojans from Play Marketplace (Threatpost)
2017-06-20 13:26

Google removed two apps, Magic Browser, and Noise Detector, that were vehicles for the Ztorg Trojan, Kaspersky Lab said.

Say Goodbye to SMBv1 in Windows Fall Creators Update (Threatpost)
2017-06-20 12:41

The SMBv1 file-sharing protocol abused by the NSA’s EternalBlue exploit to spread WannaCry ransomware is being disabled in the upcoming Windows Fall Creators Update, or Redstone 3.