Google Set to Kill SSLv3 and RC4 in SMTP, Gmail in June
Google announced this week that it will begin to disable SSLv3 and RC4 a month from now, on June 16. Continue reading Google Set to Kill SSLv3 and RC4 in SMTP, Gmail in June
Author Archives: Chris Brook
Apple Patches DROWN, Lockscreen Bypass Vulnerability, With Latest Round of Updates
Apple on Monday rolled out a series of patches for nearly all of its operating systems, including fixes for March’s DROWN vulnerability in OS X and a lockscreen bypass vulnerability in iOS.
Continue reading Apple Patches DROWN, Lockscreen Bypass Vulnerability, With Latest Round of Updates
Info on 500K Users Doxxed in Hacking Forum Dump
Nulled.IO, an underground forum that helped enable users to share stolen credentials and software cracks was hacked earlier this month, spilling a glut of information on its users. Continue reading Info on 500K Users Doxxed in Hacking Forum Dump
Threatpost News Wrap, May 13, 2016
Mike Mimoso and Chris Brook discuss the news of the week, including zero day vulnerabilities–both in Adobe Flash and Windows, a nasty vulnerability in SAP business applications, Mozilla asking FBI to disclose a Tor exploit, and more. Continue reading Threatpost News Wrap, May 13, 2016
SWIFT Warns of Second Bank Attack via PDF Malware
News of yet another attack involving a bank and SWIFT, the financial network used by thousands of banks to transfer funds, came to light Thursday. Continue reading SWIFT Warns of Second Bank Attack via PDF Malware
Corruption, Code Execution Vulnerabilities Patched in Open Source Archiver 7-Zip
Several vulnerabilities were fixed this week in the file archiver 7-Zip which could have led to arbitrary code execution and file corruption.
Continue reading Corruption, Code Execution Vulnerabilities Patched in Open Source Archiver 7-Zip
Viking Horde Malware Co-Ops Android Devices for Ad Fraud
The Viking Horde Android malware campaign can leverage victims’ phones for ad fraud, carry out DDoS attacks, send spam, and more, researchers warn.
Continue reading Viking Horde Malware Co-Ops Android Devices for Ad Fraud
Adobe Warns of Flash Zero Day, Patches Acrobat, Reader
Adobe pushed out 95 fixes for Acrobat, Reader, and ColdFusion on Tuesday and simultaneously warned about a zero day vulnerability in Flash it plans to patch on Thursday.
Continue reading Adobe Warns of Flash Zero Day, Patches Acrobat, Reader
Police Allege SWIFT Technicians Left Bangladesh Bank Vulnerable
Police in Bangladesh this week alleged that technicians associated with the financial network SWIFT introduced vulnerabilities which made it easier for hackers to infiltrate the systems of Bangladesh Bank.
Continue reading Police Allege SWIFT Technicians Left Bangladesh Bank Vulnerable
Steam Patches Broken Crypto in Wake of Replay, Padding Oracle Attacks
The digital gaming platform Steam was quick to patch a cryptographic issue in the client recently that could have allowed an attacker to read sensitive information sent over its network, take over an account, or view plain-text passwords.
Continue reading Steam Patches Broken Crypto in Wake of Replay, Padding Oracle Attacks