Security News

Malware That Targets Both Microsoft, Apple Operating Systems Found (Threatpost)
2017-03-23 19:21

A new strain of malware is designed to spread malware on either Mac OS X or Microsoft Windows, depending on where it’s opened.

Half of Android Devices Unpatched Last Year (Threatpost)
2017-03-23 16:11

Google said half of Android devices are unpatched and that percentage of potentially harmful apps on phones installed from all sources rose in 2016.

Paper Spells Out Tech, Legal Options for Encryption Workarounds (Threatpost)
2017-03-23 15:16

Bruce Schneier and Orin Kerr have written a paper that explains the technological and legal issues associated with six encryption workarounds available to law enforcement.

Google, Jigsaw Partner on Free Tools to Secure Elections (Threatpost)
2017-03-22 19:38

Jigsaw and Google said they would offer a free suite of security tools aimed at securing political elections.

Blank Slate Spam Campaign Spreads Cerber Ransomware (Threatpost)
2017-03-22 17:45

A spam campaign called Blank Slate is spreading Cerber ransomware and abusing hosting providers to register new domains as soon as they're taken down.

SAP Vulnerability Puts Business Data at Risk for Thousands of Companies (Threatpost)
2017-03-22 15:48

Researchers at ERPScan today disclosed details and a proof-of-concept exploit for a SAP GUI remote code execution vulnerability patched last week.

LastPass Fixes Ormandy RCE Bug; Two Outstanding Vulnerabilities Remain (Threatpost)
2017-03-22 15:08

LastPass has reportedly fixed one of three bugs in the password manager discovered by Google research Tavis Ormandy in the last week.

Critical Moodle Vulnerability Could Lead to Server Compromise (Threatpost)
2017-03-21 18:48

A critical vulnerability in Moodle, an open source system deployed across hundreds of thousands of universities, could expose the server to compromise.

Code Execution Vulnerability Found in Libpurple IM Library (Threatpost)
2017-03-21 18:28

A severe vulnerability has been disclosed in libpurple, the library used in the development of a number of popular instant messaging clients, including Adium for the macOS platform.

Locky, Cerber Ransomware Skilled at Hiding (Threatpost)
2017-03-21 17:11

Since January, a number of ransomware families are sharing a common infrastructure with different techniques allowing the malware to hide from detection systems.