Collaborate Disseminate
Google this week explained how it weighs potentially harmful Android apps using the Verify Apps malware scanner and a scoring system it calls Dead or Insecure. Continue reading Android Scoring System Roots Out Malicious, Harmful Apps
Carbanak has surfaced again with new campaigns using Google hosted services such as Forms and Sheets as command and control channels. Continue reading Carbanak Using Google Services for Command and Control
Samsung Smartcam devices are vulnerable to remote takeover via a malicious firmware update, researchers with the former GTVHacker group said. Continue reading New RCE Flaws Found in Samsung Smartcam
Command injection vulnerabilities and accessible default admin credentials in home routers distributed by Thailand’s largest broadband provider remain unpatched despite private disclosures to the vendors last July. Continue reading Router Vulnerabilities Disclosed in July Remain Unpatched
New rules signed by the president last week change the way the NSA is able to share raw intelligence data with other intelligence community agencies. Continue reading White House Approves New Rules for Sharing of Raw Intelligence Data
Google has taken a big step toward simplifying public key lookups at Internet scale with the release to open source on Thursday of Key Transparency. Continue reading Google’s Key Transparency Simplifies Public Key Lookups
The ShadowBrokers today ended their operations, saying they would no longer leak Equation Group exploits. Continue reading ShadowBrokers Bid Farewell, Close Doors
A bug in GoDaddy’s domain validation process forced the registrar to revoke SSL certificates and reissue certs for more than 6,000 customers. Continue reading Buggy Domain Validation Forces GoDaddy to Revoke Certs
The ShadowBrokers are selling a cache of Windows exploits and attack tools for 750 Bitcoin. Continue reading ShadowBrokers Selling Windows Exploits, Attack Tools
Microsoft on Tuesday patched a vulnerability in LSASS, the second attempt it has taken at fixing a remote denial-of-service issue in the critical Windows process. Continue reading Second Try at Windows LSASS Patch Addresses Vulnerability