Threatpost
Researcher Says NSA’s Ghidra Tool Can Be Used for RCE
Researchers have released a proof-of-concept showing how a XXE vulnerability can be exploited to attack Ghidra project users.
Kategorie: Hacking & Security
Norsk Hydro Calls Ransomware Attack ‘Severe’
When asked if the company plans to pay the ransom, its CFO said its main strategy is to use the backup data stored in the system.
Kategorie: Hacking & Security
ThreatList: DDoS Attack Sizes Drop 85 Percent Post FBI Crackdown
The FBI's crackdown on 15 DDoS-for-hire sites appears to have had an impact on DDoS attacks, the average size for which dropped 85 percent in the fourth quarter of 2018, a new report found.
Kategorie: Hacking & Security
Fourth Major Credential Spill in a Month Hits DreamMarket
Gnosticplayers has released about 26 million records from what he said are breaches of six new companies.
Kategorie: Hacking & Security
Mirai Variant Goes After Enterprise Systems
The newest Mirai variant is targeting WePresent WiPG-1000 Wireless Presentation systems and LG Supersign TVs used by enterprises.
Kategorie: Hacking & Security
Google Gives Users More Choice with Location-Tracking Apps
Developers will have a new option to for Android apps to track location only when in use.
Kategorie: Hacking & Security
Privacy Regulations Needed for Next-Gen Cars
With wide deployment expected in the next decade, the driverless automobile landscape looks fraught – from road safety to data protection.
Kategorie: Hacking & Security
Lenovo Patches Intel Firmware Flaws in Multiple Product Lines
Lenovo has issued patches for several serious vulnerabilities in its products stemming from Intel technology fixes.
Kategorie: Hacking & Security
Unpatched Fujitsu Wireless Keyboard Bug Allows Keystroke Injection
An unpatched high-severity vulnerability allows keystroke injections in Fujitsu wireless keyboards.
Kategorie: Hacking & Security
Threatlist: IMAP-Based Attacks Compromising Accounts at ‘Unprecedented Scale’
Attackers are increasingly targeting insecure legacy protocols, like IMAP, to avoid running into multi-factor authentication in password-spraying campaigns.
Kategorie: Hacking & Security
Zero-Days in Counter-Strike Client Used to Build Major Botnet
A full 39 percent of Counter-Strike 1.6 game servers on Steam were found to be malicious.
Kategorie: Hacking & Security
Cisco Patches Critical ‘Default Password’ Bug
Vulnerability allows adversaries to access monitoring system used for gathering info on operating systems and hardware.
Kategorie: Hacking & Security
GlitchPOS Malware Appears to Steal Credit-Card Numbers
A new malware targeting point of sale systems, GlitchPOS, has been spotted on a crimeware forum.
Kategorie: Hacking & Security
Insider Threats Get Mean, Nasty and Very Personal
Increasingly, attackers are targeting the most vulnerable people inside companies and exploiting their weaknesses.
Kategorie: Hacking & Security
Purveyor of Cracked Netflix, Hulu, Spotify Accounts Arrested
A Sydney man is accused of selling nearly 1 million compromised accounts, for a significant profit.
Kategorie: Hacking & Security
Intel Windows 10 Graphics Drivers Riddled With Flaws
Intel has patched several high-severity vulnerabilities in its graphics drivers for Windows 10, which could lead to code execution.
Kategorie: Hacking & Security
MAGA ‘Safe Space’ App Developer Threatens Security Researcher
The mobile app, dubbed a "Yelp for Conservatives," was found with an open API leaking reams of user data.
Kategorie: Hacking & Security
Three Ways DNS is Weaponized and How to Mitigate the Risk
Why are hackers using the DNS infrastructure against us? The answer is more complex than you might think.
Kategorie: Hacking & Security
Threat Groups SandCat, FruityArmor Exploiting Microsoft Win32k Flaw
Newly patched CVE-2019-0797 is being actively exploited by two APTs, FruityArmor and SandCat.
Kategorie: Hacking & Security
Federal Focus on Cyber Plays Out in President’s Budget, IoT Legislation
Money earmarked for the Defense Department and DHS, and bipartisan bills to address the security of federal IoT devices, showcase growing federal cyber-efforts.
Kategorie: Hacking & Security
