Threatpost
tRat Emerges as New Pet for APT Group TA505
The modular malware seems to be in a testing phase, but TA505's interest made researchers take note.
Kategorie: Hacking & Security
Managing the Risk of IT-OT Convergence
Why manufacturing and logistics are especially challenged.
Kategorie: Hacking & Security
Connected Wristwatch Allows Hackers to Stalk, Spy On Children
"Our advice is to stop using this watch" as mitigations are not available, researchers told Threatpost.
Kategorie: Hacking & Security
Ahead of Black Friday, Rash of Malware Families Takes Aim at Holiday Shoppers
As consumers skip the store crowds in favor of online deals, cyberattackers have geared up to victimize them.
Kategorie: Hacking & Security
Bitcoin Giveaway Scam Balloons, with Google the Latest Victim
A slew of verified Twitter accounts have been hijacked and altered, used to tweet out a bogus Bitcoin giveaway scam.
Kategorie: Hacking & Security
Pwn2Own Trifecta: Galaxy S9, iPhone X and Xiaomi Mi6 Fall to Hackers
Hacker contest earns participants $325,000 based on the discovery of 18 vulnerabilities.
Kategorie: Hacking & Security
Siemens Patches Firewall Flaw That Put Operations at Risk
The industrial company on Tuesday released mitigations for eight vulnerabilities overall.
Kategorie: Hacking & Security
Microsoft Patches Zero-Day Bug in Win7, Server 2008 and 2008 R2
Microsoft’s November Patch Tuesday fixes include mitigation against a zero-day vulnerability leaving Windows 7, Server 2008 and Server 2008 R2 open to attack.
Kategorie: Hacking & Security
Google’s G Suite, Search and Analytics Taken Down in Hijacking
Google cloud business customers were impacted by a Border Gateway Protocol hijacking.
Kategorie: Hacking & Security
Unpatched Android OS Flaw Allows Adversaries to Track User Location
The vulnerability is one of many with the same root cause: Cross-process information leakage.
Kategorie: Hacking & Security
Adobe Fixes Acrobat and Reader Flaw With Publicly-Available PoC
Overall, the company released only three patches as part of its regularly-scheduled November update.
Kategorie: Hacking & Security
Podcast: IoT Firms Face a ‘Tidal Wave’ of Lawsuits, Attorney Explains
An attorney in the infamous 2015 Jeep hack predicts that more lawsuits related to IoT security are looming in the future.
Kategorie: Hacking & Security
Emotet Campaign Ramps Up with Mass Email Harvesting Module
The new variant can exfiltrate emails for a period going back 180 days, en masse.
Kategorie: Hacking & Security
U.S. Chip Cards Are Being Compromised in the Millions
A full 60 million U.S. cards were compromised in the past 12 months. While 93 percent of those were EMV chip-enabled, merchants continued to use mag stripes.
Kategorie: Hacking & Security
Malware-Laced App Lurked on Google Play For a Year
Google Play’s policy prohibits apps or SDKs that download executable code, such as dex files or native code, from a source other than Google Play
Kategorie: Hacking & Security
New Boom in Facial Recognition Tech Prompts Privacy Alarms
Tech advances are accelerating the use of facial recognition as a reliable and ubiquitous mass surveillance tool, privacy advocates warn.
Kategorie: Hacking & Security
Lawsuits Aim Billions in Fines at Equifax and Ad-Targeting Companies
The results could start a wave of major damages for companies that collect and sell consumer information.
Kategorie: Hacking & Security
Recently-Patched Adobe ColdFusion Flaw Exploited By APT
The critical vulnerability, which was patched earlier in September, has put ColdFusion servers at risk.
Kategorie: Hacking & Security
ThreatList: Google Play Nine Times Safer Than Third-Party App Stores
Out of the 2 billion Android users out there, the rate of potential malware infection is less than 1 percent across the board, Google says.
Kategorie: Hacking & Security
Threatpost News Wrap Podcast for Nov. 9
The Threatpost editors break down the top news stories from this week.
Kategorie: Hacking & Security
