Collaborate Disseminate
In this Threatpost op-ed, Dave Dittrich and Katherine Carpenter discuss the imprecision in language surrounding “cyber war” and “cyber weapons,” and explain how this may contribute to bad law and policy. Continue reading Misuse of Language: ‘Cyber’; When War is Not a War, and a Weapon is Not a Weapon
ProjectSauron, an APT attack platform, has been used since 2011 to target critical government, financial and communications organizations in a number of countries. Continue reading ProjectSauron APT On Par With Equation, Flame, Duqu
Apple patched a critical iOS memory corruption vulnerability privately disclosed by jailbreak specialists Pangu Team. Continue reading iOS 9.3.4 Patches Critical Code Execution Flaw
Apple closed out Black Hat today with a long-awaited announcement that next month it will launch a bug bounty. Continue reading Apple Launches Bug Bounty with Maximum $200,000 Reward
Charlie Miller and Chris Valasek explained at Black Hat today how they were able to control steering and the parking brake on a Jeep Cherokee at speed. The two said the talk would be their last on car hacking. Continue reading Miller, Valasek Deliver Final Car Hacking Talk
Dell SecureWorks today published a report at Black Hat USA 2016 on a Nigerian Business Email Compromise scam called “wire-wire”, or “waya-waya.” Continue reading Researchers Go Inside a Business Email Compromise Scam
Oracle bug hunter David Litchfield scoured Oracle EBusiness Suite looking for vulnerabilities and shared what he found during a Black Hat talk. Continue reading Oracle EBusiness Suite ‘Massive’ Attack Surface Assessed
A Black Hat talk this week is expected to take a deep dive into the ramifications of lingering support for export-grade cryptography and how patching levels are proceeding. Continue reading Export-Grade Crypto Patching Improves
Kaspersky Lab today at Black Hat USA 2016 announced the launch of a public bug bounty, one of the few offered by a software vendor in the computer security industry. Continue reading Kaspersky Lab Launches Bug Bounty Program
Google today in the monthly Android Security Bulletin patched more than three-dozen critical vulnerabilities in Qualcomm components. Continue reading Google Patches Dozens of Critical Qualcomm Components Flaws