Collaborate Disseminate
APT33 targets petrochemical, aerospace and energy sector firms based in U.S., Saudi Arabia and South Korea with destructive malware linked to StoneDrill. Continue reading Iranian APT33 Targets US Firms with Destructive Malware
Proof-of-concept malware called aIR-Jumper can be used to bypass air-gapped network protections and send data in and out of network. Continue reading Malware Steals Data From Air-Gapped Network via Security Cameras
Businesses that are cloud-focused tend to run the most secure software, while the healthcare sector is struggling the most when it comes to accomplishing the same goal, according to the BSIMM8 Report. Continue reading Cloud-Focused Firms Earn High Marks for Software Security in BSIMM8 Report
An undocumented Microsoft Office feature allows for spying via specially crafted Word documents—no macros, exploits or any other active content needed. Continue reading Attackers Use Undocumented MS Office Feature to Leak System Profile Data
A rogue version of the WordPress plugin called “Display Widget” allowed third-parties to injecting spam advertising content into victims’ sites. Continue reading Rogue WordPress Plugin Allowed Spam Injection
Google has ejected 50 apps from its Google Play store that were harboring mobile malware dubbed ExpensiveWall. Continue reading Premium SMS Malware ‘ExpensiveWall’ Infects Millions of Android Devices
Over 4,000 insecure Elasticsearch servers have been hosting the point-of-sale malware Alina and JackPoS. Continue reading Thousands of Elasticsearch Servers Hijacked to Host PoS Malware
Microsoft fixes 25 critical vulnerabilities including one zero day under attack and one tied to the high-profile BlueBorne attack vector. Continue reading Microsoft Patches .NET Zero Day Vulnerability in September Update
Bluetooth attack vector, dubbed ‘BlueBorne’, leaves billions of smart Bluetooth devices open to attack including Android and Apple phones and millions more Linux-based smart devices. Continue reading Wireless ‘BlueBorne’ Attacks Target Billions of Bluetooth Devices
D-Link router model 850L has 10 vulnerabilities that could allow a hacker to gain remote access and control of device, according to researcher. Continue reading Popular D-Link Router Riddled with Vulnerabilities