Collaborate Disseminate
A unique attack called DNSMessenger uses DNS queries to carry out malicious PowerShell commands on compromised computers. Continue reading New Fileless Attack Using DNS Queries to Carry Out PowerShell Commands
HackerOne announced a free version of its platform for open source projects. Continue reading HackerOne Offers Open Source Projects Free Access to Platform
Cisco is warning of a flaw that creates conditions susceptible to a DoS attack in its NetFlow Generation Appliance. Continue reading Cisco Warns of High Severity Bug in NetFlow Appliance
Google removed 132 apps infected with malicious iFrames from its Google Play store. Continue reading 132 Google Play Apps Booted For Malicious IFrames
A proof of concept bypass of Google’s CAPTCHA verification system uses Google’s own web-based tools to pull off the skirting of the system. Continue reading Google reCaptcha Bypass Technique Uses Google’s Own Tools
IOActive Labs released a report Wednesday warning that consumer, industrial, and service robots in use today have serious security vulnerabilities. Continue reading Robots Rife With Cybersecurity Holes
Dridex has undergone a massive update and now sports a new injection method for evading detection based on the technique known as AtomBombing. Continue reading Dridex Trojan Gets A Major ‘AtomBombing’ Update
The ramifications of the recent SHA-1 collision attack have extended to Git and the Apache Subversion repository, both of which rely on the outdated and vulnerable hashing algorithm. Continue reading Torvalds Downplays SHA-1 Threat to Git
Google’s security researchers disclosed details of an unpatched Microsoft vulnerability in its Edge and Internet Explorer browsers. Continue reading Google Discloses Another ‘High Severity’ Microsoft Bug
Researchers say Necurs malware has been updated with a module that adds SOCKS/HTTP proxy and DDOS capabilities to this malware. Continue reading Necurs Botnet Learns New DDoS Trick