Collaborate Disseminate
A shift in APT tactics is emerging as characterized by the destructive ExPetr attacks hidden in ransomware, and WannaCry, which also failed to turn a profit. Continue reading Motivation Mystery Behind WannaCry, ExPetr
U.S. authorities along with law enforcement Europe and Asia announced today the takedown of the dark web’s largest illicit market, AlphaBay. Continue reading US, European Law Enforcement Shutter Massive AlphaBay Market
Criminals have made use of the leaked source code for the Nukebot banking Trojan, crafting modified versions of the malware to target banks in the U.S. and France. Continue reading Modified Versions of Nukebot in Wild Since Source Code Leak
Oracle’s July Critical Patch Update included fixes for 308 vulnerabilities, 165 of which are remotely exploitable. Continue reading Oracle Releases Biggest Update Ever: 308 Vulnerabilities Patched
Oracle today in its Critical Patch Update addressed a critical vulnerability in its Oracle E-Business Suite of business applications that allows for the download of business documents. Continue reading Oracle E-Business Suite Flaw Allows Downloads of Documents
Hackers hijacked CoinDash’s initial coin offering Monday, stealing $7.7 million in cryptocurrency from the nascent trading platform. Continue reading CoinDash Hacked During its ICO
Researchers Tavis Ormandy and Cris Neckar privately disclosed a critical vulnerability in Cisco’s WebEx extension for Chrome and Firefox that allows for remote code execution. Continue reading Cisco Patches Another Critical Ormandy Bug in WebEx Extension
FreeRADIUS today released an update that patches a number of vulnerabilities uncovered in a commissioned engagement using a customer fuzzer. Continue reading FreeRADIUS Update Patches Bugs Static Analysis Tools Missed
Siemens patches four vulnerabilities, including a critical authentication bypass flaw, in its SiPass integrated access control server. Continue reading Siemens Patches Authentication Bypass Flaw in SiPass Server
Cisco patched nine publicly disclosed remote code execution vulnerabilities in the SNMP subsystem running in its IOS and IOS XE software. Continue reading Cisco Patches Publicly Disclosed SNMP Vulnerabilities in IOS, IOS XE