Collaborate Disseminate
A linguistics analysis of the 28 ransom notes included with WannaCry indicate that native Chinese and English speakers wrote the original note, Flashpoint said. Continue reading WannaCry Ransom Note Written by Chinese, English Speaking Authors
Researcher Chris Evans reported a new bug and showed how also used a previously known flaw in ImageMagick to leak Yahoo server data and steal images and authentication secrets. Continue reading Yahoo Retires ImageMagick After Bugs Leak Server Memory
Yahoo has patched an account takeover vulnerability on its Flickr image-hosting service that earned an independent security researcher a $7,000 bounty. Continue reading Flickr Vulnerability Worth $7K Bounty to Researcher
Source Boston keynoter Keren Elazari sounded a call to action for industry to extend an acceptance of hackers. Continue reading The Time Has Arrived to Embrace Hackers
At Source Boston, Josh Corman of the Atlantic Council said that healthcare is suffering from a lack of security talent, devices rife with vulnerabilities, and government incentivizing bad behavior. Continue reading Healthcare Sector Suffers From Lack Of Security Professionals
Researchers have learned that the recently patched Office zero day was used to target victims in Russia with FINSPY spyware. Continue reading Office Zero Day Delivering FINSPY Spyware to Victims in Russia
Researchers at Kaspersky Lab today disclosed the activities of the Lamberts APT, a group using many of the tools and tactics found in the Vault 7 dumps. Continue reading Tools Used by Lamberts APT Found in Vault 7 Dumps
The bad guys are increasingly using potentially unwanted applications to sneak past security defences, warns Sophos Labs Continue reading Latest numbers indicate Android is now the most targeted mobile device
At the Security Analyst Summit, Mark Dowd described how memory corruption mitigations are successfully driving up exploit development costs. Continue reading Memory Corruption Mitigations Doing Their Job
Researchers may have found a link between Moonlight Maze of the late ’90s and the Turla APT, which would elevate Turla to the ranks of the Equation Group as an elite nation-state attacker. Continue reading Russian-Speaking Turla Joins APT Elite