Collaborate Disseminate
Researchers at Endgame have found new versions of TeslaCrypt in the past few weeks that target a host of new and unusual file extensions, and deploy new obfuscation and evasion techniques. Continue reading Latest TeslaCrypt Targets New File Extensions, Invests Heavily in Evasion
Researcher Patrick Wardle has developed a utility called RansomWhere? that he released today that he says does generic ransomware detection on OS X. Continue reading Generic Ransomware Detection Comes to OS X
Google released its annual Android Security Report, a state of the union on the Android ecosystem. Continue reading Android Security Report: 29 Percent of Active Devices Not Up To Patch Levels
Researchers at Bastille said they’ve more than doubled the range with which an attacker can exploit the Mousejack vulnerability. Continue reading Range of Mousejack Attack More Than Doubles
Google determined that Safe Browsing warnings correlate with quicker remediation times, though not as quick as direct contact with webmasters who have registered with Google Search Console. Continue reading Google Alerts, Direct Webmaster Communication Get Bugs Fixed Quickly
A Berkeley postdoctoral researcher and former MIT student will soon unveil Space, a static-analysis web-application security tool that can find vulnerabilities in a minute. Continue reading New MIT Scanner Finds Web App Flaws in a Minute
The Zero Day Initiative has publicly disclosed a pair of serious vulnerabilities in Apple QuickTime for Windows that will not be patched because Apple is deprecating the product. Continue reading Apple Deprecates QuickTime For Windows, Won’t Patch New Flaws
Google updated Chrome to version 50.0.2662.75, patching 20 vulnerabilities, including two high-severity bugs that qualified for rewards. Continue reading Latest Chrome Update Addresses Two High-Severity Vulnerabilities
Current versions of IBM SDK 7 and SDK 8 remain vulnerable to a 2013 Java vulnerability. Security Explorations discovered the original patch is broken and disclosed details on the flaw and a proof-of-concept exploit. Continue reading Broken IBM Java Patch Prompts Another Disclosure
The much anticipated Badlock vulnerability wasn’t in the SMB protocol after all, but in SAM and LSAD and exposed Windows machines to privilege escalation. Continue reading Badlock Vulnerability Falls Flat Against Its Hype