❌ Gnip Banking Trojan Shows Ongoing, Aggressive Development ❌
📖 Read
via "Threatpost".
The mobile malware, which incorporates Anubis source code, could evolve into a fully fledged spyware in the future.📖 Read
via "Threatpost".
Threat Post
Gnip Banking Trojan Shows Ongoing, Aggressive Development
The mobile malware, which incorporates Anubis source code, could evolve into a fully fledged spyware in the future.
❌ Linux Webmin Servers Under Attack by Roboto P2P Botnet ❌
📖 Read
via "Threatpost".
A newly-discovered peer-to-peer (P2P) botnet has been found targeting a remote code execution vulnerability in Linux Webmin servers.📖 Read
via "Threatpost".
Threat Post
Linux Webmin Servers Under Attack by Roboto P2P Botnet
A newly-discovered peer-to-peer (P2P) botnet has been found targeting a remote code execution vulnerability in Webmin Linux servers.
🔐 75% of developers worry about app security, but half lack dedicated security experts on their team 🔐
📖 Read
via "Security on TechRepublic".
The majority of developers view security as integral to the coding and development process, but lack the support of a security expert, Whitehat Security found.📖 Read
via "Security on TechRepublic".
TechRepublic
75% of developers worry about app security, but half lack dedicated security experts on their team
The majority of developers view security as integral to the coding and development process, but lack the support of a security expert, Whitehat Security found.
ATENTION‼ New - CVE-2009-5047 (debian_linux, jetty)
📖 Read
via "National Vulnerability Database".
Jetty 6.x before 6.1.22 suffers from an escape sequence injection vulnerability from two different vectors: 1) "Cookie Dump Servlet" and 2) Http Content-Length header. 1) A POST request to the form at "/test/cookie/" with the "Age" parameter set to a string throws a "java.lang.NumberFormatException" which reflects binary characters including ESC. These characters could be used to execute arbitrary commands or buffer dumps in the terminal. 2) The same attack in 1) can be exploited by requesting a page using an HTTP request "Content-Length" header set to a letteral string.📖 Read
via "National Vulnerability Database".
🕴 Google Increases Top Android Hacking Prize to $1M 🕴
📖 Read
via "Dark Reading: ".
Google expands its Android Security Rewards program and multiplies its top cash prize from $200,000 to $1 million.📖 Read
via "Dark Reading: ".
Dark Reading
Google Increases Top Android Hacking Prize to $1M
Google expands its Android Security Rewards program and multiplies its top cash prize from $200,000 to $1 million.
🕴 3 Fundamentals for Better Security and IT Management 🕴
📖 Read
via "Dark Reading: ".
Nail these security fundamentals, and your organization will be well-positioned to succeed next year and in the years to come.📖 Read
via "Dark Reading: ".
Darkreading
3 Fundamentals for Better Security and IT Management
Nail these security fundamentals, and your organization will be well-positioned to succeed next year and in the years to come.
❌ Microsoft Outlook for Android Bug Opens Door to XSS ❌
📖 Read
via "Threatpost".
Successful exploitation allows attackers to steal potentially sensitive information, change appearance of the web page, and perform phishing, spoofing and drive-by-download attacks.📖 Read
via "Threatpost".
Threat Post
Microsoft Outlook for Android Bug Opens Door to XSS
Successful exploitation allows attackers to steal potentially sensitive information, change appearance of the web page, and perform phishing, spoofing and drive-by-download attacks.
🔐 Business Email Compromise: 5 ways this fraud could happen and what can be done to prevent it 🔐
📖 Read
via "Security on TechRepublic".
Millions of dollars and loads of personal information is being stolen through a growing threat known as Business Email Compromise (BEC).📖 Read
via "Security on TechRepublic".
TechRepublic
Business Email Compromise: 5 ways this fraud could happen and what can be done to prevent it
Millions of dollars and loads of personal information is being stolen through a growing threat known as Business Email Compromise (BEC).
🔐 Business Email Compromise: 5 ways this fraud could happen and what can be done to prevent it 🔐
📖 Read
via "Security on TechRepublic".
Millions of dollars and loads of personal information is being stolen through a growing threat known as Business Email Compromise (BEC).📖 Read
via "Security on TechRepublic".
TechRepublic
Business Email Compromise: 5 ways this fraud could happen and what can be done to prevent it
Millions of dollars and loads of personal information is being stolen through a growing threat known as Business Email Compromise (BEC).
🕴 In the Market for a MSSP? Ask These Questions First 🕴
📖 Read
via "Dark Reading: ".
Not all managed security service providers are created equal. These questions can reveal whether you are hiring the right people to help secure your business.📖 Read
via "Dark Reading: ".
Dark Reading
In the Market for a MSSP? Ask These Questions First
Not all managed security service providers are created equal. These questions can reveal whether you are hiring the right people to help secure your business.
🕴 Government Agency Partners on New Tool for Election Security 🕴
📖 Read
via "Dark Reading: ".
The Cybersecurity and Infrastructure Security Agency has partnered with VotingWorks on an open source tool to aid election result audits.📖 Read
via "Dark Reading: ".
Dark Reading
Government Agency Partners on New Tool for Election Security
The Cybersecurity and Infrastructure Security Agency has partnered with VotingWorks on an open source tool to aid election result audits.
❌ Senators Demand Amazon Disclose Ring Privacy Policies ❌
📖 Read
via "Threatpost".
Amazon's Ring data collection policies are in the spotlight.📖 Read
via "Threatpost".
Threat Post
Senators Demand Amazon Disclose Ring Privacy Policies
Amazon's Ring data collection policies are in the spotlight.
🕴 Leaks of NSA, CIA Tools Have Leveled Nation-State Cybercriminal Capabilities 🕴
📖 Read
via "Dark Reading: ".
The wide availability of tools leaked by the Shadow Brokers and WikiLeaks in 2016 and 2017 have given emerging cyber powers a way to catch up, DarkOwl says.📖 Read
via "Dark Reading: ".
Darkreading
Leaks of NSA, CIA Tools Have Leveled Nation-State Cybercriminal Capabilities
The wide availability of tools leaked by the Shadow Brokers and WikiLeaks in 2016 and 2017 have given emerging cyber powers a way to catch up, DarkOwl says.
⚠ Convicted Nigerian fraudster keeps a-fraudin’ from behind bars ⚠
📖 Read
via "Naked Security".
He was supposed to be serving a 24-year sentence in the "maximum security" prison, not continuing the fraud... and going to parties.📖 Read
via "Naked Security".
Naked Security
Convicted Nigerian fraudster keeps a-fraudin’ from behind bars
He was supposed to be serving a 24-year sentence in the “maximum security” prison, not continuing the fraud… and going to parties.
⚠ Why do cryptocurrency scams work and how do you avoid them? ⚠
📖 Read
via "Naked Security".
What are ICOs, why are they so popular and why do crooks love them so much?📖 Read
via "Naked Security".
Naked Security
Why cryptocoin scams work, and how to avoid them
What are ICOs, why are they so popular and why do crooks love them so much?
❌ Google Will Award $1M-Plus to People Who Can Hack Titan M Security Chip ❌
📖 Read
via "Threatpost".
The company expanded its Android bug bounty program as one of several recent moves to ramp up mobile security.📖 Read
via "Threatpost".
Threat Post
Google Will Award $1M-Plus to People Who Can Hack Titan M Security Chip
The company expanded its Android bug bounty program as one of several recent moves to ramp up mobile security.
❌ News Wrap: Amazon Ring Risks, Stalkerware, and D-Link Router Flaws ❌
📖 Read
via "Threatpost".
From stalkerware to Amazon Ring doorbell outrage, Threatpost editors break down the top news stories of the week.📖 Read
via "Threatpost".
Threat Post
News Wrap: Amazon Ring Risks, Stalkerware, and D-Link Router Flaws
From stalkerware to Amazon Ring doorbell outrage, Threatpost editors break down the top news stories of the week.
❌ Raccoon Stealer Malware Scurries Past Microsoft Messaging Gateways ❌
📖 Read
via "Threatpost".
Financial institutions are in the crosshairs of hackers leveraging the malware to steal sensitive data.📖 Read
via "Threatpost".
Threat Post
Raccoon Stealer Malware Scurries Past Microsoft Messaging Gateways
Financial institutions are in the crosshairs of hackers leveraging the malware to steal sensitive data.
⚠ Iran’s APT33 sharpens focus on industrial control systems ⚠
📖 Read
via "Naked Security".
Iran's elite hacking group is upping its game, according to new evidence delivered at a cybersecurity conference this week.📖 Read
via "Naked Security".
Naked Security
Iran’s APT33 sharpens focus on industrial control systems
Iran’s elite hacking group is upping its game, according to new evidence delivered at a cybersecurity conference this week.
⚠ Google plans to take Android back to ‘mainline’ Linux kernel ⚠
📖 Read
via "Naked Security".
Android could be returning to its roots.📖 Read
via "Naked Security".
Naked Security
Google plans to take Android back to ‘mainline’ Linux kernel
Android could be returning to its roots.