Collaborate Disseminate
Researchers said last week they came across a malicious function that was snuck into a module in Magento in order to steal credit card information. Continue reading Credit Card Scrapers Continue to Target Magento
Researchers said last week they came across a malicious function that was snuck into a module in Magento in order to steal credit card information. Continue reading Credit Card Scrapers Continue to Target Magento
Mike Mimoso talks to Cody Pierce, director of vulnerability research and prevention with Endgame, at RSA Conference 2017 about how attackers are changing their techniques in the face of mitigations. Continue reading Cody Pierce on the Future of Exploit Development
Mike Mimoso and Chris Brook discuss the news of the week including a rash of new IP camera backdoors, James Comey’s talk at Boston College, hacking back vs. active defense, and the DOJ dropping one of its Playpen cases. Continue reading Threatpost News Wrap, March 10, 2017
A researcher claims that almost 200,000 shoddily made IP cameras could be an easy target for attackers looking to spy, brute force them or steal their credentials. Continue reading Hundreds of Thousands of Vulnerable IP Cameras Easy Target for Botnet, Researcher Says
The latest version of Firefox expands non-secure HTTP warnings, enables SHA-1 deprecation by default, and removes support for NPAPI. Continue reading Firefox 52 Expands Non-Secure HTTP Warnings, Enables SHA-1 Deprecation
A researcher claims a backdoor exists in several DVRs and IP-enabled cameras manufactured by Dahua. Continue reading Dahua Patching Backdoor in DVRs, IP Cameras
Prosecutors with the U.S. Department of Justice dropped their case against a suspect who visited the dark web site child pornography site Playpen. Continue reading DOJ Dismisses Playpen Case to Keep Tor Hack Private
Bruce Schneier talks about the early days of the RSA Conference, his campaign for IoT regulation, and more. Continue reading Bruce Schneier on IoT Regulation
The news of the week is recapped, including the fallout around CloudBleed, the CloudPets breach, and a Slack token bug. The life of Howard Schmidt is also remembered. Continue reading Threatpost News Wrap, March 3, 2017