Collaborate Disseminate
The United States government is officially blaming North Korea for the WannaCry ransomware outbreak in May that infected nearly a quarter-million computers in 150 countries. Continue reading U.S. Government Blames North Korea for WannaCry
Google’s Project Zero team dubs a new WPAD-related attack as an “aPAColypse Now” that allows a local attacker to compromise a targeted and fully patched Windows 10 PC. Continue reading Project Zero Chains Bugs for ‘aPAColypse Now’ Attack on Windows 10
Researchers warn hundreds of Lexmark printers are vulnerable to a trivial hack thanks to user “gross negligence.” Continue reading User ‘Gross Negligence’ Leaves Hundreds of Lexmark Printers Open to Attack
Malware intended for a “high-impact” attack against safety systems likely would of caused physical damage to a targeted company located in the Middle East. Continue reading Triton Malware Targets Industrial Control Systems in Middle East
Synaptics said reports that hundreds of HP laptops contained a secret keylogger that traced back to debugger software made by the company are inaccurate. Continue reading Synaptics Says Claims of a Keylogger in HP Laptops are False
A permissions flaw in Microsoft’s Azure AD Connect software could allow a rogue admin to escalate account privileges and gain unauthorized universal access within a company’s internal network. Continue reading Permissions Flaw Found Azure AD Connect
New research shows how an old vulnerability called ROBOT can be exploited using an adaptive chosen-ciphertext attack to reveal the plaintext for a given TLS session. Continue reading 19-Year-Old TLS Vulnerability Weakens Modern Website Crypto
Microsoft patched 34 vulnerabilities in all on Tuesday with most of the bugs impacting Microsoft Edge, Microsoft Office and Microsoft’s Scripting Engine. Continue reading Microsoft December Patch Tuesday Update Fixes 34 Bugs
A ransomware campaign targeting the Balkans comes with a 96-hour deadline and includes a link to a video that assures victims payments can be made easily. Continue reading New Spider Ransomware Comes With 96-Hour Deadline
Researchers are warning of a default-configuration vulnerability in the enterprise-class keyless entry products made by AMAG Technology. Continue reading Vulnerability Found in Two Keyless Entry Locks