Collaborate Disseminate
A crowdfunding effort to buy a subscription to the ShadowBrokers’ Monthly Dump Service of stolen exploits and data was shut down citing legal and ethical concerns. Continue reading Crowdfunding Effort to Buy ShadowBrokers Exploits Shuts Down
Researchers at Kaspersky Lab have found a number of programming errors in the WannaCry ransomware code that put file recovery within reach of sysadmins. Continue reading WannaCry Development Errors Enable File Recovery
A high-severity vulnerability in sudo has been patched in a number of Linux distributions; the flaw allows local attackers to elevate privileges to root. Continue reading Patches Available for Linux Sudo Vulnerability
Google announced today new security features in Gmail, including the news that it will enhance early phishing detection in Gmail through dedicated machine learning.
Continue reading New Machine Learning Behind Early Phishing Detection in Gmail
Ecommerce sites using the Yopify plugin were leaking customers’ names, locations and purchases. Continue reading Privacy Issue Fixed in Yopify Ecommerce Notification Plugin
The ShadowBrokers announced details on how to subscribe to its Monthly Dump Service, which is available for 100 Zcash. Continue reading ShadowBrokers Put Price on Monthly Zero Day Leaks
Pacemakers and pacemaker programmers lack authentication and are plagued with thousands of software vulnerabilities across leading manufacturers. Continue reading Pacemaker Ecosystem Fails its Cybersecurity Checkup
Rep. Tom Graves has revised a draft of the Active Cyber Defense Certainty Act with new provisions that include mandatory notification and permission to recovery or destroy stolen data on the attacker’s computer. Continue reading Revised Active Defense Bill Allows Victims to Recover or Destroy Stolen Data
Rep. Tom Graves has revised a draft of the Active Cyber Defense Certainty Act with new provisions that include mandatory notification and permission to recovery or destroy stolen data on the attacker’s computer. Continue reading Revised Active Defense Bill Allows Victims to Recover or Destroy Stolen Data
A linguistics analysis of the 28 ransom notes included with WannaCry indicate that native Chinese and English speakers wrote the original note, Flashpoint said. Continue reading WannaCry Ransom Note Written by Chinese, English Speaking Authors