Collaborate Disseminate
A new Android Trojan, Switcher, uses victims’ devices to infect WiFi routers and funnel users of the network to malicious sites. Continue reading Android Trojan Switcher Infects Routers via DNS Hijacking
Google on Monday announced Project Wycheproof, a collection of unit tests designed to help check for weaknesses in cryptographic algorithms. Continue reading Google Unveils Cryptographic Library Test Suite Wycheproof
The insecurity of WordPress plugins has been well documented, especially over the last year, but in the grand scheme of things, it’s not as bad as it seems, experts claim. Continue reading Tales of WordPress Plugin Insecurity Overblown, Researchers Say
Mike Mimoso and Chris Brook discuss the news of the week including Yahoo’s latest breach announcement, a DDoS-for-hire crackdown, hackers seeking help with Mirai, and some new Adobe patches. Continue reading Threatpost News Wrap, December 16, 2016
Apple released a massive update for macOS Sierra on Tuesday to address 72 vulnerabilities in the operating system. Continue reading Apple Fixes 97 Vulnerabilities Across macOS, iTunes, Safari, iCloud
Law enforcement from more than a dozen countries last week carried out a series of operations designed to crack down on DDoS-for-hire services. Continue reading Law Enforcement Targets Users of DDoS-For-Hire Services
As part of Patch Tuesday Adobe patched a zero-day vulnerability in Flash Player the company claims is being used in targeted attacks against Internet Explorer users on Windows.
Continue reading Adobe Patches 31 Vulnerabilities, Flash Zero-Day Under Attack
Apple released iOS 10.2 on Monday, addressing a handful of security vulnerabilities, including two issues that could have led to arbitrary code execution.
Continue reading Apple Fixes 12 Vulnerabilities in iOS 10.2
A sandboxed alpha version of the Tor Browser was released over the weekend and while there are still some rough edges and bugs, it could be a step toward protecting Tor users from recent de-anonymization exploits.
Continue reading Alpha Version of Sandboxed Tor Browser Released
Mike Mimoso and Chris Brook discuss the news of the week, including the latest Linux bug, Sony closing backdoors in cameras, and Google’s new open source fuzzer. Continue reading Threatpost News Wrap, December 8, 2016