Google to Distrust WoSign, StartCom Certs in 2017
Google announced Monday that it will distrust certificates issued by WoSign and StartCom when in it ships Chrome 56 in January 2017.
Continue reading Google to Distrust WoSign, StartCom Certs in 2017
Author Archives: Chris Brook
WhatsApp Blasted by EU Data Protection Group Over Facebook Sharing
The Article 29 Working Party, an EU privacy coalition urges WhatsApp to clarify that user information shared between the company and Facebook is compliant with data protection laws on the books in Europe. Continue reading WhatsApp Blasted by EU Data Protection Group Over Facebook Sharing
Threatpost News Wrap, October 28, 2016
Mike Mimoso and Chris Brook recap the news of the week, including the storylines around last week’s Dyn DDoS attack, Keen Team winning big again at Pwn2Own, and a fake Windows installer.
Keen Lab Takes Down iPhone 6S, Nexus 6P at Mobile Pwn2Own
Hackers with Keen Team identified vulnerabilities in iOS 10.1 and Android Nougat at Mobile Pwn2Own this week. Continue reading Keen Lab Takes Down iPhone 6S, Nexus 6P at Mobile Pwn2Own
Joomla Update Fixes Two Critical Issues, 2FA Error
Joomla fixed two critical issues in the content management system and is strongly encouraging users to update their sites immediately. Continue reading Joomla Update Fixes Two Critical Issues, 2FA Error
Remote Code Execution Vulnerabilities Plague LibTIFF Library
Three vulnerabilities, all which can lead to remote code execution, exist in the LibTIFF library. Continue reading Remote Code Execution Vulnerabilities Plague LibTIFF Library
Following Lull, New Campaigns Pushing Retooled ‘Pumpkin’ Locky
Researchers said they observed three separate spam campaigns pushing an updated version of Locky on Monday. Continue reading Following Lull, New Campaigns Pushing Retooled ‘Pumpkin’ Locky
Fake Microsoft Installer Leads to Malware, Support Call Scam
An installer purporting to be Microsoft Security Essentials is malware that can lead to a support call scam. Continue reading Fake Microsoft Installer Leads to Malware, Support Call Scam
Mozilla Turning TLS 1.3 On By Default With Firefox 52
Martin Thomson, a Principle Engineer at Mozilla confirmed TLS 1.3 will be turned on by default in Firefox 52. Continue reading Mozilla Turning TLS 1.3 On By Default With Firefox 52
Threatpost News Wrap, October 21, 2016
The dangers of Skyping and typing, the fingerprint warrant story, hiding credit card numbers in images, and more are discussed.
Continue reading Threatpost News Wrap, October 21, 2016