Ransomware, Cyberespionage Dominate Verizon DBIR

Verizon’s Data Breach Investigations Report for 2017 shows big growth in the reported number of ransomware attacks and incidents involving cyberespionage. Continue reading Ransomware, Cyberespionage Dominate Verizon DBIR→

Attack Method Highlights Weaknesses in Microsoft CFG

As Microsoft hardens its defenses with tools such as Control Flow Guard, researchers at Endgame are preparing for the reality of Counterfeit Object-Oriented Programming attacks to move from theoretical to real. Continue reading Attack Method Highlights Weaknesses in Microsoft CFG→

Auto Lender Exposes Loan Data For Up To 1 Million Applicants

A trove of consumer auto loan data—some 1 million records—has been locked down after a researcher found an exposed and accessible database online. Continue reading Auto Lender Exposes Loan Data For Up To 1 Million Applicants→

Original XPan Ransomware Returns, Targets Brazilian SMBs

Brazilian cybercriminals are using the original version of the XPan ransomware, targeting small to medium-sized business based in Brazil with the malware. Continue reading Original XPan Ransomware Returns, Targets Brazilian SMBs→

SMSVova Spyware Hiding in ‘System Update’ App Ejected From Google Play Store

An Android app that falsely claimed to be a tool for keeping smartphones up-to-date with the latest version of the OS was found surreptitiously tracking the physical location of it users using spyware called SMSVova. Continue reading SMSVova Spyware Hiding in ‘System Update’ App Ejected From Google Play Store→