Android Users Vulnerable to ‘High-Severity’ Overlay Attacks
Android phones not running the latest Oreo OS are vulnerable to a high-severity “toast” overlay attack. Continue reading Android Users Vulnerable to ‘High-Severity’ Overlay Attacks
Author Archives: Tom Spring
New Dridex Phishing Campaign Delivers Fake Accounting Invoices
A new variant of the banking trojan Dridex is part of a sophisticated phishing attack targeting users of the cloud-based accounting firm Xero. Continue reading New Dridex Phishing Campaign Delivers Fake Accounting Invoices
Microsoft Programming Error is Behind Dangerous Kernel Bug, Researchers Claim
Researchers say a 18-year-old programming error by Microsoft is creating a kernel bug that can be abused by an attacker. Continue reading Microsoft Programming Error is Behind Dangerous Kernel Bug, Researchers Claim
Multiple Vulnerabilities Found in NVIDIA, Qualcomm, Huawei Bootloaders
Researchers find six previously unknown memory corruption and unlock-bypass vulnerabilities in major chipset vendors’ firmware code. Continue reading Multiple Vulnerabilities Found in NVIDIA, Qualcomm, Huawei Bootloaders
Patch Released for Critical Apache Struts Bug
The Apache Software Foundation released a patch on Tuesday for a critical vulnerability impacting all versions of Struts since 2008. Continue reading Patch Released for Critical Apache Struts Bug
‘HoeflerText’ Popups Target Browsers With RAT and Locky Ransomware
A malware campaign utilizing bogus “HoeflerText” popup warnings is back in full swing targeting Google Chrome and Firefox browsers with Locky ransomware attacks and the NetSupport Manager RAT. Continue reading ‘HoeflerText’ Popups Target Browsers With RAT and Locky Ransomware
No Fix Planned For LabVIEW Bug, Says National Instruments
Researchers identified a vulnerability in National Instruments’ LabVIEW software that will not receive patch by the vendor. Continue reading No Fix Planned For LabVIEW Bug, Says National Instruments
FDA Recalls 465K Pacemakers Tied to MedSec Research
Abbott Laboratories releases software fixes for pacemakers that could allow an attacker to wirelessly access the devices and steal personal data, drain the battery and disrupt normal life-sustaining operations. Continue reading FDA Recalls 465K Pacemakers Tied to MedSec Research
Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch
A previously undocumented kill switch for a remote management feature baked into many Intel chips can be switched off. Continue reading Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch
Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch
A previously undocumented kill switch for a remote management feature baked into many Intel chips can be switched off. Continue reading Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch