Collaborate Disseminate
Mike Mimoso and Chris Brook discuss the news of the week, including last Friday’s ShadowBrokers dump – how Microsoft learned of the vulnerabilities, how they were patched by Oracle, along with Microsoft ditching passwords, and a new car dongle hack. Continue reading Threatpost News Wrap, April 21, 2017
Google fixed a vulnerability that could’ve let an attacker carry out phishing attacks with Unicode domains in Chrome but Mozilla is holding off – for now. Continue reading Google Fixes Unicode Phishing Vulnerability in Chrome 58, Firefox Standing Pat
Google fixed a vulnerability that could’ve let an attacker carry out phishing attacks with Unicode domains in Chrome but Mozilla is holding off – for now. Continue reading Google Fixes Unicode Phishing Vulnerability in Chrome 58, Firefox Standing Pat
Microsoft announced this week its giving users a new way to sign into their accounts without long and complicated passwords. Continue reading Microsoft Touts New Phone-Based Login Mechanism
InterContinental Hotels Group said on Friday that it found malware designed to access payment card data at more than 1,000 of its hotels. Continue reading IHG Confirms Second Credit Card Breach Impacting 1,000-Plus Hotels
VMware patched a critical vulnerability in its vCenter Server platform late last week that could have let an attacker execute arbitrary code in some scenarios. Continue reading VMware Fixes Critical RCE in vCenter Server
Mike Mimoso, Tom Spring, and Chris Brook recap Infiltrate Con in Miami last week, and Kaspersky Lab’s Security Analyst Summit in St. Maarten Continue reading Threatpost News Wrap, April 14, 2017
A researcher at this year’s Security Analyst Summit staged a series of honeypots at his friends’ houses to record IoT traffic, exploit attempts and other statistics. Continue reading Stories From Two Years in an IoT Honeypot
Academics argue that Netflix’s recent upgrade to HTTPS is doing little to protect its users from a passive traffic analysis attack. Continue reading Netflix’s HTTPS Update Can’t Combat Passive Traffic Analysis Attacks
Adobe patched 59 vulnerabilities across five different products, including Flash Player, Acrobat/Reader, Photoshop, Adobe Campaign, and its Adobe Creative Cloud App on Tuesday. Continue reading Adobe Patches 59 Vulnerabilities Across Flash, Reader, Photoshop