Collaborate Disseminate
Mike Mimoso, Tom Spring, and Chris Brook preview Black Hat 2016, including Ivan Krstic’s talk on Apple/iOS security, Dan Kaminsky’s keynote, IoT, PAC malware, and more. Continue reading Threatpost Black Hat Preview, August 2, 2016
For over a year attackers were able to carry out a malvertising campaign that managed to draw between one and five million client hits a day, according to researchers. The scam infected thousands a day using a one-two-punch of filtering and steganography. Continue reading AdGholas Malvertising Campaign Leveraged Steganography, Filtering
Mike Mimoso and Chris Brook discuss the news of the week, including a wireless keyboard vulnerability – KeySniffer, NIST’s statement on 2FA, a LastPass remote compromise bug, and a new Tor paper.
Continue reading Threatpost News Wrap, July 29, 2016
Developers with Android’s Security Team peeled back some of the layers on the mobile operating system this week; describing the lengths Google goes to protect the Linux kernel. Continue reading Google Details Linux Kernel Defenses, New and Old
The U.S. National Institute for Standards and Technology (NIST) said SMS-based two factor authentication would soon be deprecated. Continue reading NIST Recommends SMS Two-Factor Authentication Deprecation
Yahoo has been given until August 31 to comply with a court order asking how the company was able to recover emails that were thought to be deleted.
Continue reading Yahoo Ordered to Explain Data Gathering Procedures in Deleted Email Case
Wireless keyboards made by eight different companies suffer from a vulnerability that can allow attackers to eavesdrop on keystrokes from up to 250 feet away, researchers warned Tuesday.
Continue reading KeySniffer Vulnerability Opens Wireless Keyboards to Snooping
PayPal recently fixed a vulnerability on its PayPal.me site that could’ve let an attacker change a user’s profile without their permission.
Continue reading PayPal Fixes CSRF Vulnerability in PayPal.me
Starting next year, Firefox users who navigate to pages that contain Flash will be asked their consent before activating the plugin. The move, long expected, comes as developers seek to curb usage of Flash in everyday web browsing.
Continue reading Firefox to Block Flash in August, Disable in 2017
SAP recently fixed 15 different vulnerabilities that existed in the database management system HANA and subsequent communication channels. The bugs affect 10,000 users running the software. Continue reading 15 Vulnerabilities in SAP HANA Outlined