Cobalt Group Pushes Revamped ThreadKit Malware
Threat actors have updated their malware to include a macro-based delivery framework. Continue reading Cobalt Group Pushes Revamped ThreadKit Malware
Author Archives: Tom Spring
TA505 Crooks are Now Targeting US Retailers with Personalized Campaigns
Threat group moves away from “smash-and-grab” attacks and adopts a boutique approach to targeting victims. Continue reading TA505 Crooks are Now Targeting US Retailers with Personalized Campaigns
Infected WordPress Sites Are Attacking Other WordPress Sites
Researchers identified a widespread campaign of brute force attacks against WordPress websites. Continue reading Infected WordPress Sites Are Attacking Other WordPress Sites
Google Patches 11 Critical RCE Android Vulnerabilities
Google’s December Android Security Bulletin tackles 53 unique flaws. Continue reading Google Patches 11 Critical RCE Android Vulnerabilities
Chris Vickery on the Marriott Breach and a Rash of Recent High-Profile Hacks
In this Newsmaker Interview, ‘breach hunter’ Chris Vickery explores a recent spate of breaches from Marriott, USPS and Dell EMC. Continue reading Chris Vickery on the Marriott Breach and a Rash of Recent High-Profile Hacks
Bing Warns VLC Media Player Site is ‘Suspicious’ in Likely False-Positive Gaff
After identifying the official VLC media download page as “unsafe” with its Bing search engine, Microsoft now suggests it was done in error. Continue reading Bing Warns VLC Media Player Site is ‘Suspicious’ in Likely False-Positive Gaff
Cisco Patches Critical Bug in License Management Tool
The vulnerability could allow attacker to execute arbitrary SQL queries. Continue reading Cisco Patches Critical Bug in License Management Tool
Old Printer Vulnerabilities Die Hard
New research on an old problem reveals despite efforts, the InfoSec professionals still have a way to go when it comes to securing printers. Continue reading Old Printer Vulnerabilities Die Hard
Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS
Adobe issues patch for a Flash Player vulnerability that could lead to an arbitrary code execution on targeted systems. Continue reading Critical Adobe Flash Bug Impacts Windows, macOS, Linux and Chrome OS
Pwn2Own Trifecta: Galaxy S9, iPhone X and Xiaomi Mi6 Fall to Hackers
Hacker contest earns participants $325,000 based on the discovery of 18 vulnerabilities. Continue reading Pwn2Own Trifecta: Galaxy S9, iPhone X and Xiaomi Mi6 Fall to Hackers