Collaborate Disseminate
Researchers have identified a vulnerability in an Android API in messaging apps like Skype and perhaps Signal, and Telegram, that could lead to privilege escalation and data loss, including private keys. Continue reading ‘Surreptitious Sharing’ Android API Flaw Leaks Data, Private Keys
The week in news is recapped, including how the FBI cracked that iPhone, ransomware hitting hospitals, and the Hack the Pentagon bug bounty trial program. Continue reading Threatpost News Wrap, April 1, 2016
The FBI has refused to comply with a judge’s request to describe how it was able to compromise Tor and trigger a wave of child pornography investigations last year.
Continue reading FBI Mum on How Exactly It Hacked Tor
More than 1,400 vulnerabilities that exist in a widely used drug cabinet system won’t be patched according to an ICS-CERT advisory.
Continue reading 1,400 Vulnerabilities To Remain Unpatched in Medical Supply System
Mike Mimoso talks to Endgame chief technology officer Jamie Butler about targeted attacks, ransomware, and what defenders are doing about detecting attacks on their networks.
Continue reading Jamie Butler on Detecting Targeting Attacks
Truecaller, an app that specializes in phone call management, has patched a hole that inadvertently leaked user information. Continue reading Truecaller Fixes Data Leaking Hole in Android App
Facebook was quick to fix an issue earlier this month that could’ve let an attacker break into four percent of all active, locked accounts. Continue reading Facebook Fixes Instagram Vulnerability That Opened 1M Accounts to Compromise
Verizon is in the process of notifying 1.5 million customers of its Enterprise Solutions division that they’ve been breached. Continue reading Data on 1.5 Million Verizon Enterprise Customers Up for Sale
Mike Mimoso and Chris Brook recap the week in news, including how the FBI vacated Tuesday’s Apple hearing, a crypto iMessage bug that was patched, and the latest hospital to be hit by the ransomware Locky. The two also preview Badlock and what implicat… Continue reading Threatpost News Wrap, March 25, 2016
Google pushed out the latest version of Chrome Thursday afternoon, fixing five issues, four of them critical.
Continue reading Google Fixes Four Critical Vulnerabilities in Latest Chrome Build