Collaborate Disseminate
A security company was able to track command and control traffic generated by hacking groups thanks to an anomaly in a pen-testing tool. Continue reading Anomaly in pen-test tool made malware servers visible
Researchers have spotted an unusual ‘trackware’ attack triggered by a viewing a PDF inside the Chrome browser. Continue reading Data-tracking Chrome flaw triggered by viewing PDFs
Researchers have revealed how malicious Thunderbolt and PCI Express (PCIe) peripherals could be used to compromise computers running macOS, Windows, Linux and FreeBSD. Continue reading Thunderclap: Apple Macs at risk from malicious Thunderbolt peripherals
Chip maker Nvidia has released a security update, fixing eight CVE flaws in its Windows and Linux graphics display drivers. Continue reading Nvidia patches eight security flaws in graphics products
DNS security is under serious threat from cyberattackers and domain overseer ICANN wants internet companies to do something about it. Continue reading ICANN demands DNSSEC to combat DNS hijacking
Adobe has issued a new fix addressing a vulnerability in Reader it thought it had fixed on 12 February as part of Patch Tuesday. Continue reading Adobe patches the same critical Reader flaw twice in one week
Until this month, the Edge browser could bypass its own warnings about Flash content on 58 websites, thanks to a hidden list. Continue reading Flash “security bypass” list hidden in Microsoft Edge browser
Several popular password managers appear to do a weak job at scrubbing passwords from memory once they are no longer being used. Continue reading Password managers leaking data in memory, but you should still use one
The CSRF bypass flaw has now been fixed, and the researcher who discovered it has netted $25,000. Continue reading Facebook flaw could have allowed an attacker to hijack accounts
Six years after it was introduced, it looks as if Android’s Advertising ID (AAID) might no longer be the privacy forcefield Google claimed it would be. Continue reading Thousands of Android apps bypass Advertising ID to track users