Collaborate Disseminate
A new crawler from Shodan and Recorded Future called Malware Hunter seeks out command and control servers managing endpoints infected with remote access Trojans and other malware. Continue reading Malware Hunter Crawls Internet Looking for RAT C2s
Fuze addressed two issues that publicly exposed recordings of private business meetings made over the collaboration platform. Continue reading Fuze Patches Bug That Exposed Recordings of Private Business Meetings
Dan Geer’s Source Boston keynote included a declaration that cybersecurity and humanity’s future are forever conjoined. Continue reading Dan Geer: Cybersecurity, Humanity’s Future ‘Conjoined’
Yahoo has patched an account takeover vulnerability on its Flickr image-hosting service that earned an independent security researcher a $7,000 bounty. Continue reading Flickr Vulnerability Worth $7K Bounty to Researcher
Starting with Chrome 62, Google will start marking any HTTP page where users may enter data, and any HTTP page visited in incognito mode Continue reading Chrome to Mark More HTTP Pages ‘Not Secure’
Source Boston keynoter Keren Elazari sounded a call to action for industry to extend an acceptance of hackers. Continue reading The Time Has Arrived to Embrace Hackers
At Source Boston, Josh Corman of the Atlantic Council said that healthcare is suffering from a lack of security talent, devices rife with vulnerabilities, and government incentivizing bad behavior. Continue reading Healthcare Sector Suffers From Lack Of Security Professionals
Exploits for patched Android elevation of privilege vulnerabilities were published through the Zimperium N-Days Exploit Acquisition Program. Continue reading Zimperium Acquisition Program Publishes Exploits for Patched Android Bugs
Hyundai Motor America patched its Blue Link mobile app after researchers found a cleartext encryption key that could be use to expose user and vehicle information. Continue reading Hyundai Patches Leaky Blue Link Mobile App
Scans show tens of thousands of Windows servers infected with the DoublePulsar kernel exploit leaked by the ShadowBrokers two weeks ago. Continue reading NSA’s DoublePulsar Kernel Exploit In Use Internet-Wide