Google Domain Enables HSTS Protection
Google ensures HTTPS connections to its domains with support for HTTP Strict Transport Security, or HSTS. Continue reading Google Domain Enables HSTS Protection
Author Archives: Tom Spring
WPAD Flaws Leak HTTPS URLs
Sniffing HTTPS URLs with malicious PAC files gets easier with a new technique that exploits flaws in the Web Proxy AutoDiscovery protocol. Continue reading WPAD Flaws Leak HTTPS URLs
New Trojan SpyNote Installs Backdoor on Android Devices
A new SpyNote Trojan can give bad guys control over your phone from the camera, microphone to eavesdropping on phone calls. Continue reading New Trojan SpyNote Installs Backdoor on Android Devices
Petya Sabotages Rival Ransomware Chimera, Leaks Decryption Keys
Petya ransomware developers leak competitor Chimera’s decryption keys in an attempt to drive new business to a new Petya and Mischa offering. Continue reading Petya Sabotages Rival Ransomware Chimera, Leaks Decryption Keys
White House Beefs Up Cyber Threat Response Action Plan
A new White House directive outlines the U.S. cyber threat response strategy along with issuing a color-coded cyber threat schema. Continue reading White House Beefs Up Cyber Threat Response Action Plan
Public, Private Sector Team to Fight Ransomware
Security firms and law enforcement launch No More Ransom, a web-based effort dedicated to ransomware awareness and decryption tools. Continue reading Public, Private Sector Team to Fight Ransomware
Windows UAC Bypass Leaves Systems Open to Malicious DLLs
Launching a BypassUAC attack just got a bit easier with a new Windows User Account Control bypass technique that can fly under the radar of security solutions that monitor for this type of circumvention. Continue reading Windows UAC Bypass Leaves Systems Open to Malicious DLLs
PornHub Hack Earns Researchers $22,000
Researchers found a serious vulnerability in PHP code that could have allowed hackers to gain access to porn site’s private user data. Continue reading PornHub Hack Earns Researchers $22,000
PowerWare Ransomware Masquerades as Locky to Intimidate Victims
PowerWare ransomware spoofs Locky malware family in an attempt to scare victims into paying up. Continue reading PowerWare Ransomware Masquerades as Locky to Intimidate Victims
Google Fixes 48 Bugs, Sandbox Escape, in Chrome
Google fixed a whopping 48 security flaws in version 52 of its Chrome web browser. Continue reading Google Fixes 48 Bugs, Sandbox Escape, in Chrome