Collaborate Disseminate
Voter registration data belonging to the entirety of Chicago’s electoral roll—1.8 million records—was found a week ago in an Amazon Web Services bucket. Continue reading Vendor Exposes Backup of Chicago Voter Roll via AWS Bucket
Despite yesterday’s leak of the Apple iOS Secure Enclave decryption key, experts are urging calm over claims of an immediate threat to user data. Continue reading It’s Not Exactly Open Season on the iOS Secure Enclave
Mike Mimoso and Tom Spring discuss this week’s security news, including a discussion on recent hijacking of popular Chrome extensions and Adobe’s decision to end-of-life Flash Player. Continue reading Threatpost News Wrap, August 18, 2017
A hacker identified only as xerub published the decryption key unlocking the iOS Secure Enclave Processor. Continue reading Hacker Publishes iOS Secure Enclave Firmware Decryption Key
Cisco patched two high-severity vulnerabilities in its Cisco Application Policy Infrastructure Controller (APIC) that could allow an attacker to elevate privileges on the host machine. Continue reading Cisco Patches Privilege Escalation Bugs in APIC
Cisco patched two high-severity vulnerabilities in its Cisco Application Policy Infrastructure Controller (APIC) that could allow an attacker to elevate privileges on the host machine. Continue reading Cisco Patches Privilege Escalation Bugs in APIC
IBM researchers have demonstrated a filesystem-level version of the Rowhammer attack against MLC NAND flash memory. Continue reading Rowhammer Attacks Come to MLC NAND Flash Memory
A.P. Moller -Maersk said June’s NotPetya wiper malware attacks would cost the world’s largest shipping container company $300M USD in lost revenue. Continue reading Maersk Shipping Reports $300M Loss Stemming from NotPetya Attack
Google has removed the Interface Online Chrome extension from the Chrome Web Store. The plugin was used by criminals in Brazil to target corporate users with the aim of stealing banking credentials. Continue reading Google Removes Chrome Extension Used in Banking Fraud
Google has removed the Interface Online Chrome extension from the Chrome Web Store. The plugin was used by criminals in Brazil to target corporate users with the aim of stealing banking credentials. Continue reading Google Removes Chrome Extension Used in Banking Fraud