Breaking Signal: A Six-Month Journey
Researchers spent six months poking holes in Signal and urge a bigger spotlight on security testing. Continue reading Breaking Signal: A Six-Month Journey
Author Archives: Tom Spring
Researcher Warns SIEMs Are Weak Link In Network Security Chain
Security information and event management solutions are supposed to boost security, but researchers say the network analysis tools are ripe attack targets. Continue reading Researcher Warns SIEMs Are Weak Link In Network Security Chain
Baseband Zero Day Exposes Millions of Mobile Phones to Attack
A previously undisclosed baseband vulnerability impacting Huawei smartphones, laptop WWAN modules and IoT components was revealed Thursday at the Infiltrate Conference Continue reading Baseband Zero Day Exposes Millions of Mobile Phones to Attack
Chrome Security Team Tackles ‘Friendly Fire’ To Keep Browser Safe
Justin Schuh, lead engineer of Chrome Security, said ensuring browser security for Chrome users is a balancing act juggling OEM pressures, questionable certificate authorities and quashing third-party software incompatibility issues. Continue reading Chrome Security Team Tackles ‘Friendly Fire’ To Keep Browser Safe
Android Variant of Notorious Pegasus Spyware Found
Researchers say a variant of the notorious surveillance software called Pegasus has been targeting Android users allowing third parties to take screenshots, capture audio, read email and exfiltrate data from targeted phones. Continue reading Android Variant of Notorious Pegasus Spyware Found
Trump Signs Repeal of ISP Privacy Rules
President Trump signed a resolution to complete the overturning of internet privacy protections that would of prevented ISPs from tracking you online without first asking users to opt-in. Continue reading Trump Signs Repeal of ISP Privacy Rules
New RAT Targets Koreans And Is Skilled At Evading Detection
Cisco Talos researchers spot a stealthy new remote administration tool calling ROKRAT that targets Korean-language Microsoft Word alternative Hangul Word Processor. Continue reading New RAT Targets Koreans And Is Skilled At Evading Detection
Fake SEO Plugin Used In WordPress Malware Attacks
Malware that passes itself off as a WordPress SEO plugin has been infecting sites and opening a backdoor for hackers on thousands of sites. Continue reading Fake SEO Plugin Used In WordPress Malware Attacks
Verizon Rebuts Critics of Data-Collecting App
The Electronic Frontier Foundation retracted a blog post today highly critical of Verizon and the upcoming rollout of an app called AppFlash made by Evie Labs. Continue reading Verizon Rebuts Critics of Data-Collecting App
Aviation-Related Phishing Campaigns Seeking Credentials
Researchers warn of a wave in aviation-themed phishing attacks that aim to steal credentials and install malware. Continue reading Aviation-Related Phishing Campaigns Seeking Credentials