WordPress 4.7.2 Update Fixes XSS, SQL Injection Bugs
WordPress fixed three security issues, including a XSS and SQL injection, with WordPress 4.7.2 this week. Continue reading WordPress 4.7.2 Update Fixes XSS, SQL Injection Bugs
Author Archives: Chris Brook
Threatpost News Wrap, January 27, 2017
The Star Wars Twitter botnet, the return of Lavabit, a critical Cisco Webex flaw, and the St. Louis Library ransomware story are discussed. Continue reading Threatpost News Wrap, January 27, 2017
Facebook Touts ‘Safer’ Security Key Login
Facebook is letting users tie a physical security key to their account as an added layer of security. Continue reading Facebook Touts ‘Safer’ Security Key Login
Uber.com Backup Bug Nets Researcher $9K
A researcher earned $9K for identifying a XXE vulnerability in third party backup software used by Uber. Continue reading Uber.com Backup Bug Nets Researcher $9K
SpyNote RAT Now Disguised As Netflix App
A new version of the SpyNote Trojan is designed to trick Android users into thinking it’s a legitimate Netflix application. Continue reading SpyNote RAT Now Disguised As Netflix App
Secure Email Service Lavabit Relaunches
Lavabit, the secure email provider that suspended operations back in 2013 after the US government asked for its users SSL keys, relaunched Friday under a new architecture. Continue reading Secure Email Service Lavabit Relaunches
Coalition of Cryptographers, Researchers Urge Guardian to Retract WhatsApp Story
A coalition of researchers and cryptographers are urging the Guardian to retract a story it published last week which suggested the encrypted messaging app WhatsApp contained a backdoor. Continue reading Coalition of Cryptographers, Researchers Urge Guardian to Retract WhatsApp Story
Coalition of Cryptographers, Researchers Urge Guardian to Retract WhatsApp Story
A coalition of researchers and cryptographers are urging the Guardian to retract a story it published last week which suggested the encrypted messaging app WhatsApp contained a backdoor. Continue reading Coalition of Cryptographers, Researchers Urge Guardian to Retract WhatsApp Story
Threatpost News Wrap, January 20, 2017
Mike Mimoso, Tom Spring, and Chris Brook discuss security-wise what they hope will and won’t change under a Trump presidency, then discuss the news of the week, including SHA-1 deprecation, Carbanak’s return, and the WhatsApp “backdoor” debacle. Continue reading Threatpost News Wrap, January 20, 2017
ProtonMail Gets Own Tor-Accessible .Onion Hidden Service
Encrypted email service ProtonMail announced early Thursday that it had added its own Tor hidden service. Continue reading ProtonMail Gets Own Tor-Accessible .Onion Hidden Service