Collaborate Disseminate
Mozilla fixed 13 security issues, including two critical vulnerabilities that could have led to spoofing and clickjacking, among other issues, when it updated Firefox to the latest build, Firefox 47, this week.
Continue reading Firefox 47 Fixes 13 Vulnerabilities, Removes Click-To-Activate Plugin Whitelist
Uber patched a bug in its site recently that could have allowed an attacker to log into some of its sites without a password and further compromise its internal network. Continue reading Uber Pays Researcher $10K for Login Bypass Exploit
Hackers infiltrated the European social network VK.com at some point over the last several years and made off with credentials for 100 million of its users. Continue reading 100M ‘Russian Facebook’ Credentials For Sale
Deep in the code of the BlackShades ransomware there exist a handful of strings that once decoded, taunts security researchers. Continue reading BlackShades Ransomware Targets US, Russians, Teases Researchers
Mike Mimoso and Chris Brook discuss the news of the week, including the back and forth around whether or not TeamViewer was hacked, the fallout around the years-old MySpace and Tumblr breaches, and a 90K Windows zero day.
Continue reading Threatpost News Wrap, June 13, 2016
TeamViewer continues to refute claims this week it was hacked and instead claims that password reuse and careless user actions may have led to a scourge of hacks. Continue reading TeamViewer Denies Hack, Blames Password Reuse for Compromises
Moxa has opted to discontinue embedded computers that suffer from a vulnerability which can allow remote authenticated users to write to the firmware and render devices unusable. Continue reading Moxa Discontinuing Vulnerable Line of ICS Devices
Hackers are selling roughly 427 million passwords belonging to users of MySpace along with information on 65 million Tumblr users. Continue reading Millions of Stolen MySpace, Tumblr Credentials Being Sold Online
Mike Mimoso and Chris Brook discuss the news of the week, including a big LinkedIn breach, TeslaCrypt closing up shop, and a breakthrough in random number generation. The two also recap this week’s Source Conference in Boston.
Continue reading Threatpost News Wrap, May 20, 2016
When it comes to cloud computing, APIs more or less drive everything, but in the eyes of some researchers, existing security controls haven’t kept pace.
Continue reading Protecting Cloud APIs Critical to Mitigating Total Compromise