Unpatched Microsoft Zero-Day in JET Allows Remote Code-Execution
Microsoft said that it’s working on a fix for a zero-day flaw in its JET Database Engine. Continue reading Unpatched Microsoft Zero-Day in JET Allows Remote Code-Execution
Author Archives: Tara Seals
Lucy Gang Debuts with Unusual Android MaaS Package
The threat actor’s Android-focused cyber-arms package, dubbed Black Rose Lucy, is limited in reach for now, but clearly has global ambitions. Continue reading Lucy Gang Debuts with Unusual Android MaaS Package
Magecart Strikes Again, Siphoning Payment Info from Newegg
The incident, hard on the heels of the British Airways breach, shows that Magecart is quickly evolving and shows no signs of slowing down. Continue reading Magecart Strikes Again, Siphoning Payment Info from Newegg
State Government Online Payment Service Exposes 14M Customers
Outdated security practices made it simple to access other people’s receipts for everything from traffic tickets to paying bail. Continue reading State Government Online Payment Service Exposes 14M Customers
Researchers Heat Up Cold-Boot Attack That Works on All Laptops
The attack bypasses BIOS mitigations for cold-boot compromise on models from Apple, Dell, Lenovo and all others made in the last 10 years. Continue reading Researchers Heat Up Cold-Boot Attack That Works on All Laptops
E.U.: Tech Giants Face Big Fines, 1 Hour Limit to Remove Extremist Content
The rules would apply to all hosting service providers offering services in the E.U., regardless of size, even if they’re not based there. Continue reading E.U.: Tech Giants Face Big Fines, 1 Hour Limit to Remove Extremist Content
OilRig APT Continues Its Ongoing Malware Evolution
The Iran-linked APT appears to be in a state of continuous tool development, analogous to the DevOps efforts seen in the legitimate software world. Continue reading OilRig APT Continues Its Ongoing Malware Evolution
ThreatList: Microsoft Macros Remain Top Vector for Malware Delivery
The second-most popular delivery method is CVE-2017-11882, a patched Microsoft vulnerability that allows the attacker to perform arbitrary code-execution. Continue reading ThreatList: Microsoft Macros Remain Top Vector for Malware Delivery
PowerShell Obfuscation Ups the Ante on Antivirus
The development fits a trend that sees threat actors turning to well-known, commodity malware, overcoming its easy detection with ever-better obfuscation methods. Continue reading PowerShell Obfuscation Ups the Ante on Antivirus
Osiris Banking Trojan Displays Modern Malware Innovation
Osiris’ fundamental makeup positions it in the fore of malware trends, despite being based on old source code that’s been knocking around for years. Continue reading Osiris Banking Trojan Displays Modern Malware Innovation