Collaborate Disseminate
Security researchers have expanded and improved a three-year-old attack that exploits the compression mechanism used to speed up browsing in order to recover sensitive information from encrypted Web traffic.
The attack, known as BREACH, takes advan… Continue reading HTTP compression continues to put encrypted communications at risk
Starting with iOS 9, Apple has tried to make it harder for attackers to trick users into installing unauthorized apps on their devices by abusing stolen enterprise certificates. However, it left one door open that attackers can still exploit: the pr… Continue reading Hackers can abuse the iOS mobile device management protocol to deliver malware
Starting with iOS 9, Apple has tried to make it harder for attackers to trick users into installing unauthorized apps on their devices by abusing stolen enterprise certificates. However, it left one door open that attackers can still exploit: the pr… Continue reading Hackers can abuse the iOS mobile device management protocol to deliver malware
One of the best pieces of security advice any computer expert can give you is to enable two-factor authentication for websites that support it. With password breaches so common nowadays, it could be the one thing that keeps hackers from stealing you… Continue reading 5 things you should know about two-factor authentication
Building botnets made up of routers, modems, wireless access points and other networking devices doesn’t require sophisticated exploits. Remaiten, a new worm that infects embedded systems, spreads by taking advantage of weak Telnet passwords.
Remai… Continue reading Your Linux-based home router could succumb to a new Telnet worm, Remaiten
It’s hard enough for non-technical users to deal with ransomware infections: understanding public-key cryptography, connecting to the Tor anonymity network and paying with Bitcoin cryptocurrency. A new malicious program now makes it even more diffic… Continue reading Petya ransomware overwrites MBRs, locking users out of their computers
A new ransomware program written in Windows PowerShell is being used in attacks against enterprises, including health care organizations, researchers warn.PowerShell is a task automation and configuration management framework that’s included in Wind… Continue reading New ransomware abuses Windows PowerShell, Word document macros
A Trojan program is being distributed through USB drives and seems to be designed for stealing information from so-called air-gapped computers that are not connected to the Internet.
The new Trojan has been dubbed USB Thief by security researchers from antivirus firm ESET and has several characteristics that set it apart from the traditional malware programs that spread using USB storage devices and the Windows Autorun feature.
First of all, USB Thief infects USB drives that contain portable installations of popular applications like Firefox, NotePad++ or TrueCrypt. It’s copied to such installations as a plug-in or DLL (dynamic link library) and is then executed along with those applications.
To read this article in full or to leave a comment, please click here
Continue reading Stealthy USB Trojan hides in portable applications, targets air-gapped systems
A Trojan program is being distributed through USB drives and seems to be designed for stealing information from so-called air-gapped computers that are not connected to the Internet.
The new Trojan has been dubbed USB Thief by security researchers from antivirus firm ESET and has several characteristics that set it apart from the traditional malware programs that spread using USB storage devices and the Windows Autorun feature.
First of all, USB Thief infects USB drives that contain portable installations of popular applications like Firefox, NotePad++ or TrueCrypt. It’s copied to such installations as a plug-in or DLL (dynamic link library) and is then executed along with those applications.
To read this article in full or to leave a comment, please click here
Continue reading Stealthy USB Trojan hides in portable applications, targets air-gapped systems
Systems administrators should get ready to fix a critical vulnerability on April 12 that affects the Windows and Samba implementations of the Server Message Block (SMB) protocol.
The vulnerability was discovered by Stefan Metzmacher, a core develop… Continue reading Prepare to patch a critical flaw in Windows and Samba file sharing in 3 weeks