Virtual machine escape fetches $105,000 at Pwn2Own hacking contest [updated]
Hack worked by stitching together three separate exploits. Continue reading Virtual machine escape fetches $105,000 at Pwn2Own hacking contest [updated]
Author Archives: Dan Goodin
Microsoft’s silence over unprecedented patch delay doesn’t smell right
Canceling Patch Tuesday at the last minute warrants an explanation, not platitudes. Continue reading Microsoft’s silence over unprecedented patch delay doesn’t smell right
In-the-wild exploits ramp up against high-impact sites using Apache Struts
Hackers are still exploiting the bug to install malware on high-impact sites. Continue reading In-the-wild exploits ramp up against high-impact sites using Apache Struts
Malware found preinstalled on 38 Android phones used by 2 companies
Malicious apps were surreptitiously added somewhere along the supply chain. Continue reading Malware found preinstalled on 38 Android phones used by 2 companies
Dear Confide: “We would never” isn’t the same as “we can’t”
Confidential messenger service provides no authentication or integrity assurances. Continue reading Dear Confide: “We would never” isn’t the same as “we can’t”
Critical vulnerability under “massive” attack imperils high-impact sites [Updated]
Exploits for easy-to-spot bug are trivial, reliable, and publicly available. Continue reading Critical vulnerability under “massive” attack imperils high-impact sites [Updated]
After NSA hacking exposé, CIA staffers asked where Equation Group went wrong
CIA hackers wasted no time analyzing the blunders made by their NSA counterparts. Continue reading After NSA hacking exposé, CIA staffers asked where Equation Group went wrong
This hard drive will self destruct. Data-wiping malware targets Europe
Meaner strain of Shamoon makes comeback, joined by new, never-before disk wiper. Continue reading This hard drive will self destruct. Data-wiping malware targets Europe
Mike Pence used an AOL e-mail account for state business and it got hacked
As a candidate, Trump VP castigated Clinton for use of a private e-mail server. Continue reading Mike Pence used an AOL e-mail account for state business and it got hacked
Yahoo cookie hacks affected 32 million accounts, CEO forgoes bonus
Nation-sponsored attackers targeted 26 specific accounts. Continue reading Yahoo cookie hacks affected 32 million accounts, CEO forgoes bonus