Collaborate Disseminate
Researchers at Endgame are expected at Black Hat to introduce Hardware Assisted Control Flow Integrity (HA-CFI), which leverages features in the micro-architecture of Intel processors for security. Continue reading New Technique Checks Mitigation Bypasses Earlier
LastPass has patched a vulnerability in its Firefox add-on that allows attackers complete remote compromise of the password manager Continue reading LastPass Patches Ormandy Remote Compromise Flaw
Donald Trump may have left himself an out today when he urged Russian hackers to find 30,000 emails deleted by Hillary Clinton from her private server. Continue reading Trump Comments Straddle Line of Soliciting Computer Crime
Kaspersky Lab researchers participated in a Reddit AMA, touching on topics such as attack attribution, critical infrastructure security, attacker and researcher tradecraft, and the shortage of security talent. Continue reading Attributing Advanced Attacks Remains Challenge For Researchers
Kimpton Hotels & Restaurants, a nationwide chain of 62 boutique hotels, is investigating a string of unauthorized charges on payment cards used at a number of its locations. Continue reading Kimpton Hotels Investigating Payment Card Fraud
Rapid7 has disclosed nine vulnerabilities in Orsam Lightify Pro and Home smart lighting products, some of which can be used as a pivot point for remote attacks. Continue reading Unpatched Smart Lighting Flaws Pose IoT Risk to Businesses
Researchers at Northeastern University next week at DEF CON are expected to present a paper describing their framework for discovering Tor hidden services directories that snoop on hidden services. Continue reading Upcoming Tor Design Battles Hidden Services Snooping
An Internet scan of the IPv4 address space uncovered more than 100 critical facilities exposed to the public Internet, including hydropower plants in Germany and Italy. Continue reading Scan Reveals Hydropower Plants, Other Critical Infrastructure Exposed Online
Cisco today released patches for two products, including one for a vulnerability rated high criticality in Cisco IOS XR for the Cisco Network Convergence System series routers. Continue reading Cisco Patches DoS Flaw in NCS 6000 Routers
Academics from the University of Florida and Villanova University developed a generic ransomware detector for Windows systems called CryptoDrop. Continue reading Academics Build Early-Warning Ransomware Detection System