Custom WhatsApp Build Delivers Triada Malware
Researchers have spotted the latest version of the Triada trojan targeting mobile devices via an advertising SDK. Continue reading Custom WhatsApp Build Delivers Triada Malware
Author Archives: Tom Spring
Microsoft Spills 38 Million Sensitive Data Records Via Careless Power App Configs
Data leaked includes COVID-19 vaccination records, social security numbers and email addresses tied to American Airlines, Ford, Indiana Department of Health and New York City public schools. Continue reading Microsoft Spills 38 Million Sensitive Data Records Via Careless Power App Configs
Web Censorship Systems Can Facilitate Massive DDoS Attacks
Systems are ripe for abuse by attackers who can abuse systems to launch DDoS attacks. Continue reading Web Censorship Systems Can Facilitate Massive DDoS Attacks
Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets
Valve plugs an API bug found in its Steam platform that that abused the Smart2Pay system to add unlimited funds to gamer digital wallets. Continue reading Critical Valve Bug Lets Gamers Add Unlimited Funds to Steam Wallets
Black Hat: Novel DNS Hack Spills Confidential Corp Data
Threatpost interviews Wiz CTO about a vulnerability recently patched by Amazon Route53’s DNS service and Google Cloud DNS. Continue reading Black Hat: Novel DNS Hack Spills Confidential Corp Data
Crypto Hack Earned Crooks $600 Million
In one of the largest cryptocurrency hacks to date, cyberattackers reportedly stole millions from the decentralized finance (DeFi) platform Poly Network. Continue reading Crypto Hack Earned Crooks $600 Million
Black Hat: Scaling Automated Disinformation for Misery and Profit
Researchers demonstrated the power deep neural networks enlisted to create a bot army with the firepower to shape public opinion and spark QAnon 2.0. Continue reading Black Hat: Scaling Automated Disinformation for Misery and Profit
Black Hat: New CISA Head Woos Crowd With Public-Private Task Force
Day two Black Hat keynote by CISA Director Jen Easterly includes launch of private-public partnership with Amazon, Google and Microsoft to fight cybercrime. Continue reading Black Hat: New CISA Head Woos Crowd With Public-Private Task Force
Black Hat: Microsoft’s Patch for Windows Hello Bypass Bug is Faulty, Researchers Say
Researchers show how to circumvent Microsoft’s Windows Hello biometric authentication using a spoofed USB camera. Continue reading Black Hat: Microsoft’s Patch for Windows Hello Bypass Bug is Faulty, Researchers Say
Black Hat: Let’s All Help Cyber-Immunize Each Other
We’re selfish if we’re only mitigating our own stuff, said Black Hat USA 2021 keynoter Jeff Moss. Let’s be like doctors battling COVID and work for herd immunity. Continue reading Black Hat: Let’s All Help Cyber-Immunize Each Other