Collaborate Disseminate
Under Armour is getting kudos for disclosing breach within weeks, but concerns remain over an unknown portion of credentials reportedly stored using the weak SHA-1 hashing function. Continue reading Under Armour Reports Massive Breach of 150 Million MyFitnessPal Accounts
Drupal developers are urged to patch a bug that allows attackers to take over a site simply by visiting it. Continue reading Drupal Issues Highly Critical Patch: Over 1M Sites Vulnerable
Cisco releases 22 patches as part of its semiannual Cisco IOS and IOS XE software security advisory. Continue reading Cisco Patches Two Critical RCE Bugs in IOS XE Software
Researcher finds Microsoft’s January Patch Tuesday release included a fix for the Intel Meltdown bug, however the update opened up a new vulnerability. Continue reading Bad Microsoft Meltdown Patch Made Some Windows Systems Less Secure
Researchers identify a new malware family called GoScanSSH that avoids servers linked to government and military IP addresses. Continue reading GoScanSSH Malware Targets SSH Servers, But Avoids Military and .GOV Systems
Attackers, purportedly hailing from Korea, are stepping up their malware campaign with three new techniques ranging from abusing UAC and targeting Windows 10. Continue reading Sanny Malware Updates Delivery Method
Mozilla is testing a method of securing DNS traffic via HTTPS, but is faced with some privacy resistance. Continue reading Mozilla Tests DNS over HTTPS: Meets Some Privacy Pushback
Threatpost talks to Kaspersky Lab researcher Kurt Baumgartner who was instrumental in tracking the latest activities of the Russian-speaking Sofacy APT gang. Continue reading A Closer Look at APT Group Sofacy’s Latest Targets
Drupal is giving developers ample time to prepare for an update that patches a “highly critical” flaw because exploits might be developed within hours or days of disclosure. Continue reading Drupal Forewarns ‘Highly Critical’ Bug to be Patched Next Week
Netflix opens up bug bounty program to all white hat hackers and ups the ante for bugs to as much as $15,000. Continue reading Netflix Opens Public Bug Bounty Program with $15K Payout Cap