Black Hat 2019: 5G Security Flaw Allows MiTM, Targeted Attacks
Academic researchers carry out attacks on high-end commercial devices as well as narrowband IoT sensors. Continue reading Black Hat 2019: 5G Security Flaw Allows MiTM, Targeted Attacks
Author Archives: Tara Seals
Black Hat 2019: Security’s Powerful Cultural Transformation
Dino Dai Zovi, mobile security lead at Square, discusses ongoing transformation in security’s role in the workplace during the keynote. Continue reading Black Hat 2019: Security’s Powerful Cultural Transformation
Smominru Cryptominer Scrapes Credentials for Half-Million Machines
The adversaries have retooled with EternalBlue and credential theft to add a new “access mining” revenue stream. Continue reading Smominru Cryptominer Scrapes Credentials for Half-Million Machines
Cryptolocking WordPress Plugin Locks Up Blog Posts
A new type of malicious plugin has been spotted in the wild with the capability of targeting individual blog posts. Continue reading Cryptolocking WordPress Plugin Locks Up Blog Posts
Mass Spoofing Campaign Takes Aim at Walmart
The sites are targeting job-seekers, movie aficionados and shoppers in hopes of harvesting their personal information. Continue reading Mass Spoofing Campaign Takes Aim at Walmart
Puzzling Gwmndy Botnet Focuses on Low-Volume Proxy Connections
After infecting Fiberhome routers, its sole purpose seems to be setting up SOCKS5 proxies. Continue reading Puzzling Gwmndy Botnet Focuses on Low-Volume Proxy Connections
Google and ARM Tackle Android Bugs with Memory-Tagging
Buffer overflows, race conditions, use-after-free and more account for more than half of all vulnerabilities in the Android platform. Continue reading Google and ARM Tackle Android Bugs with Memory-Tagging
MegaCortex Ransomware Revamps for Mass Distribution
Manual steps have been replaced by automation. Continue reading MegaCortex Ransomware Revamps for Mass Distribution
Critical Bug in Android Antivirus Exposes Address Books
Comprehensive testing of 21 free Android antivirus apps revealed big security vulnerabilities and privacy concerns; especially AEGISLAB, BullGuard, dfndr and VIPRE. Continue reading Critical Bug in Android Antivirus Exposes Address Books
90% of Enterprise iPhone Users Open to iMessage Spy Attack
Vast majority of Apple iOS users haven’t updated to iOS 12.4, leaving themselves wide open to a public exploit. Continue reading 90% of Enterprise iPhone Users Open to iMessage Spy Attack