Collaborate Disseminate
Samsung updates S9, Note 8 and S8 phones with 27 patches from a RCE bug to a patch that prevents an ancient peek-and-poke attack first identified in 1980s. Continue reading Samsung Patches Six Critical Bugs in Flagship Handsets
Researchers maintain Microsoft’s vaunted Arbitrary Code Guard in the Edge browser can’t stop hackers from mounting attacks. Continue reading Google Project Zero Calls Windows 10 Edge Defense ‘ACG’ Flawed
The leak of point-of-sale malware source code is a double-edge sword to researchers who view it as boon to research, but a headache when it comes to inspiring future variants and attacks. Continue reading PoS Malware ‘TreasureHunter’ Source Code Leaked
In total, Microsoft’s May Patch Tuesday roundup included 68 security patches, with 21 listed as critical, 45 rated important and two listed low in severity. Continue reading May Patch Tuesday Fixes Two Bugs Under Active Attack
Ransomware adopts Process Doppelgänging technique to avoid antivirus researchers and avoid detection in a newly identified malware double threat targeting users in the U.S., Kuwait and Germany. Continue reading Variant of SynAck Malware Adopts Doppelgänging Technique
Florida-based phone maker BLU is facing an FTC complaint over allegations it shared detailed personal user data with a third-party firm that included full text messages, call logs and contact lists. Continue reading Phone Maker BLU Settles with FTC Over Unauthorized User Data Extraction
Secure-messaging firm Signal was told by Amazon not to use its AWS servers for domain-fronting, a technique used to enable communications in countries such as Egypt, Oman, Qatar and UAE where the service is banned. Continue reading Free Speech Advocates Blast Amazon Over Threats Against Signal
Samples of North Korean antivirus software called SiliVaccine crib software code from a competitor and come loaded with malware and a backdoor. Continue reading Samples of SiliVaccine Offer Rare Peek Inside North Korea’s Antivirus Software
Researchers warn that the code behind this remote access trojan has been tweaked in an attempt to decrease antivirus detection. Continue reading Updated GravityRAT Malware Adds Advanced AV Detection
Default configuration of WD’s My Cloud storage device keeps port open for unprivileged data exfiltration within a network. Continue reading Western Digital My Cloud EX2 NAS Device Leaks Files