Collaborate Disseminate
If AvosLocker stole Gigabyte’s master keys, threat actors could force hardware to download fake drivers or BIOS updates in a supply-chain attack a la SolarWinds. Continue reading Gigabyte Allegedly Hit by AvosLocker Ransomware
A researcher combed through the Twitch leak and found what they said was evidence of PayPal chargebacks with names and emails; employees’ emails; and more. Continue reading Twitch Leak Included Emails, Passwords in Clear Text: Researcher
One easily disproved conspiracy theory tied the ~six-hour outage to a supposed data breach tied to a Sept. 22 hacker forum ad for 1.5B Facebook user records. Continue reading Facebook Blames Outage on Faulty Router Configuration
They were all flat on their faces for hours on Monday, throwing off DNS error messages or other server-related errors.
Continue reading Facebook Outage Drags Down Instagram, WhatsApp, Messenger, Oculus VR
Citizen Lab urges Apple users to update immediately. The new zero-click zero-day ForcedEntry flaw affects all things Apple: iPhones, iPads, Macs and Watches.
Continue reading Apple Issues Emergency Fix for NSO Zero-Click Zero Day
More than a dozen US-based web servers were used to host 10 malware families, distributed through mass phishing campaigns. Malware families include Dridex, GandCrab, Neutrino, IcedID and others. Evidence suggests the existence of distinct threat actors… Continue reading Mapping Out a Malware Distribution Network
Ursnif is one of the main threats that is effectively evading detection right now (at publication) The dropper uses a COM technique to hide its process parentage WMI is used to bypass a Windows Defender attack surface reduction rule Fast evolution of d… Continue reading Tricks and COMfoolery: How Ursnif Evades Detection
We are following the money to see what happens to the proceeds from cybercrime. This research shows cybercriminals are money laundering through both familiar and unfamiliar channels. Reserve your copy of the full report: Into the Web of Profit In April… Continue reading Cybercriminals Use Bitcoin as One Method of Laundering Money | Part 1
This blog reviews the details of Meltdown and discusses the inherent immunity for end users provided by Bromium’s architecture. Meltdown is an Intel CPU vulnerability leveraging speculative execution which gives an attacker-controlled process the… Continue reading Anatomy of Meltdown – A Technical Journey
The Intel chip vulnerability triggered Spectre and Meltdown – information leakage vulnerabilities. With the advent of the Microsoft Windows patch, it’s important to upgrade Bromium first to keep your security intact. Micro-virtualization ca… Continue reading Ian Pratt, Bromium Co-Founder, Why Bromium is Releasing an Upgrade [Video]