Collaborate Disseminate
Gunter Ollmann, CSO at Vectra networks, talks to Mike Mimoso about ransomware as a prototype for malware going forward, as well as the long-term future of exploit kits and whether IoT is something that can be secured sooner rather than later.
Continue reading Gunter Ollmann on the Future of Ransomware, Exploit Kits, and IoT
Two academics discussed just how woefully inadequate some services are encryption-wise in a talk at Black Hat on Thursday.
Continue reading Lack of Encryption Leads to Large Scale Cookie Exposure
Joshua Drake of Zimperium Labs talks to Mike Mimoso about the last year post-Stagefright, the effectiveness of Google’s monthly patching cycle, and some of the security enhancements forthcoming in Android N. Continue reading Joshua Drake on Android Security Post-Stagefright
In the future, cyberattacks on power plants might be done with malware and flying hacker drones. Continue reading How Drones Could Help Hackers Shut Down Power Plants
Researchers demonstrated how they can capture both Track 2 data and bypass chip and pin protections with a Raspberry Pi and infected pin pads at Black Hat. Continue reading Researchers Bypass Chip-and-Pin Protections at Black Hat
Dan Kaminsky advocates fixing today’s internet before it breaks the same way it did in the 1990s. Continue reading Fixing ‘This Internet’ Before It Breaks Again
The new attack can spin a steering wheel 90 degrees and get you into a ditch, or worse, at any speed Continue reading The Jeep hackers return to ditch a car going 60 mph
Mike Mimoso, Tom Spring, and Chris Brook preview Black Hat 2016, including Ivan Krstic’s talk on Apple/iOS security, Dan Kaminsky’s keynote, IoT, PAC malware, and more. Continue reading Threatpost Black Hat Preview, August 2, 2016
Two researchers have created a proof-of-concept for a cheap, multi-functional, hacker drone. Continue reading The ‘Danger Drone’ Is a $500 Flying Hacker Laptop
Six common security issues stemming from the incorrect implementation of code hooking and injection techniques have been unearthed by EnSilo researchers in over 15 different products, including anti-virus (AV) and anti-exploitation solutions, data loss prevention software (DLP) and host-based intrusion-prevention systems (HIPS). The fact that some of these issues also affect three different hooking engines, including the most popular one (Microsoft Detours), means that thousands of product are likely affected – and not just security … More → Continue reading Flawed code hooking engines open endpoints to compromise