Collaborate Disseminate
Google’s Issue Tracker contained until recently a vulnerability that would allow an external party access to any unpatched bug listed and described in the database. Continue reading Flaw in Google Bug Tracker Exposed Reports About Unpatched Vulnerabilities
A malicious Google Chrome extension being spread in phishing emails steals any data posted online by victims. Continue reading Malicious Chrome Extension Steals Data Posted to Any Website
Rockwell Automation has patched its Stratix wireless access point against the KRACK vulnerability, joining a growing list of vendors in the commercial and industrial controls spaces moving quickly to reduce their exposure. Continue reading Rockwell Automation Patches Wireless Access Point against Krack
Researchers at Cisco found a modified version of the leaked NSA exploit EternalRomance in this week’s Bad Rabbit attack. Continue reading EternalRomance Exploit Found in Bad Rabbit Ransomware
Researchers have linked the Bad Rabbit ransomware attack to this summer’s ExPetr/Not Petya outbreak. Continue reading Bad Rabbit Linked to ExPetr/Not Petya Attacks
A ransomware attack called BadRabbit has put a halt to business inside a handful of Russian and Ukrainian businesses. Continue reading BadRabbit Ransomware Attacks Hitting Russia, Ukraine
The DUHK Attack leverages a 20-year-old random number generator flaw to recover private keys. More pertinent, researchers said, is that the flaw exposes gaps in the FIPS certification process. Continue reading DUHK Attack Exposes Gaps in FIPS Certification
Sofacy has been using a lure document connected to a cyber conflict conference to target researchers and others interested in cybersecurity. Continue reading Latest Sofacy Campaign Targeting Security Researchers
A joint Technical Alert, TA17–293A, describing the activities of a Russian APT may contain signatures and rules likely to trigger false positives in some security systems. Continue reading DHS Alert on Dragonfly APT Contains IOCs, Rules Likely to Trigger False Positives
Researchers have spotted Locky ransomware infections emanating from the Necurs botnet via Word attachments using a DDE technique that Microsoft says is an Office feature and does not merit a security patch. Continue reading Necurs-Based DDE Attacks Now Spreading Locky Ransomware