One Year After WannaCry: A Fundamentally Changed Threat Landscape
Threatpost talked to several security researchers about what’s changed in the past year. Continue reading One Year After WannaCry: A Fundamentally Changed Threat Landscape
Collaborate Disseminate
Threatpost talked to several security researchers about what’s changed in the past year. Continue reading One Year After WannaCry: A Fundamentally Changed Threat Landscape
The SMBv1 file-sharing protocol abused by the NSA’s EternalBlue exploit to spread WannaCry ransomware is being disabled in the upcoming Windows Fall Creators Update, or Redstone 3. Continue reading Say Goodbye to SMBv1 in Windows Fall Creators Update
Mike Mimoso and Chris Brook discuss the news of the week, including Microsoft’s XP patches, Hidden Cobra, a Nigerian BEC campaign, MacRansom, and more. Continue reading Threatpost News Wrap, June 16, 2017
Pandemic is a Windows implant built by the CIA that turns file servers into Patient Zero on a local network, infecting machines requesting files with Trojanized replacements. Continue reading WikiLeaks Dumps CIA Patient Zero Windows Implant
The ShadowBrokers announced details on how to subscribe to its Monthly Dump Service, which is available for 100 Zcash. Continue reading ShadowBrokers Put Price on Monthly Zero Day Leaks
A worm called EternalRocks has been spreading seven Windows SMB exploits leaked by the ShadowBrokers, including EternalBlue, which was used to spread WannaCry. Continue reading EternalRocks Worm Spreads Seven NSA SMB Exploits
A worm called EternalRocks has been spreading seven Windows SMB exploits leaked by the ShadowBrokers, including EternalBlue, which was used to spread WannaCry. Continue reading EternalRocks Worm Spreads Seven NSA SMB Exploits
Exploits spreading WannaCry ransomware have surfaced after the discovery of a killswitch put a quick halt to the initial global outbreak. Continue reading WannaCry Variants Pick Up Where Original Left Off