SEC News

What's new arround internet

Last one

Src	Date (GMT)	Titre	Description	Tags	Stories	Notes
	2017-11-13 17:45:18	All Major Browsers Now Support WebAssembly (lien direct)	It took only two years for all browser vendors to get on the same page regarding the new WebAssembly standard, and as of October 2017, all major browsers support it. [...]
	2017-11-13 15:03:04	XZZX Cryptomix Ransomware Variant Released (lien direct)	A new CryptoMix Ransomware variant has been discovered that appends the .XZZX extension to encrypted files. This article will discuss the changes found in this new variant. [...]
	2017-11-13 13:06:00	Apple FaceID Tricked With $150 Mask (lien direct)	Security researchers have broken Apple's FaceID security system using a mask they said takes around a few days to make and costs only $150. [...]
	2017-11-13 10:03:54	Firefox 57 Brings Better Sandboxing on Linux (lien direct)	Firefox 57, set to be released tomorrow, will ship with improvements to the browser's sandbox security feature for Linux users. [...]
	2017-11-13 06:00:00	New IcedID Banking Trojan Discovered (lien direct)	Malware experts have spotted a new player on the banking trojan scene that they named IcedID and which is currently in its first stages of development. [...]
	2017-11-13 05:40:53	Google Addresses Android\'s Biggest Security Problem: Accessibility Services (lien direct)	Google has emailed Android app developers and has informed them of plans to remove all apps that misuse the Accessibility service from the Play Store. [...]
	2017-11-12 20:20:18	Computer Glitch Keeps Inmate in Prison for Five Extra Months (lien direct)	A glitch in the Louisville Metro Department of Corrections (LMDC) computer system kept an inmate in prison for five extra months. Human error was also involved. [...]
	2017-11-11 15:00:44	DHS Team Hacks a Boeing 757 (lien direct)	A team of academics and private industry experts, led by DHS officials, remotely hacked a Boeing 757 airplane parked at an airport in Atlantic City, New Jersey. [...]
	2017-11-11 03:00:00	Hack Cost Equifax Only $87.5 Million — for Now (lien direct)	During an earnings call detailing the Q3 2017 financial results, Equifax execs said the company incurred $87.5 million in expenses related to the massive data breach it suffered earlier in the year and which it publicly disclosed in September 2017. [...]		Equifax
	2017-11-10 16:48:39	The Week in Ransomware - November 10th 2017 - Ordinypt & LockCrypt (lien direct)	Mostly small silly variants released this week, but we did have a few interesting stories. The bigger stories include aÂÂ new variant from CrysisÂÂ released,ÂÂ ÂÂ a wiper disguised as a ransomware targeting companies in Germany, andÂÂ hackers using RDP to install the LockCrypt ransomware. [...]
	2017-11-10 15:35:13	Antivirus Engine Design Flaw Helps Malware Sink Its Teeth Into Your System (lien direct)	Several antivirus products are affected by a design flaw that allows malware or a local attacker to abuse the "restore from quarantine" feature to send previously detected malware to sensitive areas of the user's operating system, helping the malware gain boot persistence with elevated privileges. [...]
	2017-11-10 13:42:37	New Cobra Crysis Ransomware Variant Released (lien direct)	A new variant of the Crysis ransomware has been discovered that appends the cobra extension to encrypted files. While this ransomware cannot be decrypted for free, this article will take a look at the infection and provide possible methods to try to restore files. [...]
	2017-11-10 10:47:53	Man Uses DDoS-for-Hire Services to Attack Former Employer, Taunts Firm via Email (lien direct)	Court documents obtained by Bleeping Computer reveal that the FBI has charged a Minnesota man for launching hundreds of DDoS attacks on companies all over the world, including his former employers and business partners. [...]
	2017-11-10 08:30:09	First Android Malware Detected Using New "Toast Overlay" Attack (lien direct)	A theoretical attack described by security researchers at the start of September has been integrated into a live malware distribution campaign for the first time. [...]
	2017-11-10 06:02:29	LockCrypt Ransomware Crew Started via Satan RaaS, Now Deploying Their Own Strain (lien direct)	Since June this year, a group of cyber-criminals has been breaking into unsecured enterprise servers via RDP brute-force attacks and manually installing a new type of ransomware called LockCrypt. [...]
	2017-11-09 21:07:12	Avira Introduces SafeThings to Protect your Network\'s IOT Devices (lien direct)	Avira has announced a new security solution called SmartThings that aims to protect consumers from the lack of security found in most Internet of Things devices. [...]
	2017-11-09 19:05:53	Google Ranks Phishing Above Keyloggers & Password Reuse as Bigger Threat to Users (lien direct)	Research carried out by Google engineers and academics from the University of California, Berkeley and the International Computer Science Institute has revealed that phishing attacks pose a more significant threat to users losing access to their Google accounts when compared to keyloggers or password reuse. [...]
	2017-11-09 17:04:05	WikiLeaks Releases Source Code of CIA Cyber-Weapon (lien direct)	WikiLeaks published the first-ever batch of source code for CIA cyber-weapons. The source code released today is for a toolkit named Hive, a so-called implant framework, a system that allows CIA operatives to control the malware it deploys on infected computers. [...]
	2017-11-09 13:51:58	"Eavesdropper" Vulnerability Exposes Millions of Private Conversations (lien direct)	Security researchers have discovered that tens of developers have left API credentials in hundreds of applications built around the Twilio service. [...]
	2017-11-09 11:50:19	Ordinypt Ransomware Intentionally Destroys Files, Currently Targeting Germany (lien direct)	A new ransomware strain called Ordinypt is currently active in Germany, but instead of encrypting users' documents, the ransomware rewrites files with random data. [...]
	2017-11-09 06:40:44	Stock Trader Accused of Hacking Brokerage Firms and Placing Illegal Trades (lien direct)	The Department of Justice has filed an indictment against Joseph Willner, 42, of Ambler, Pennsylvania, accusing the day trader of hacking into brokerage accounts at various financial companies and placing unauthorized trades. [...]
	2017-11-09 01:00:00	Google Adds New Features in Chrome to Fight Malvertising (lien direct)	Google announced plans today for three new Chrome security features that will block websites from sneakily redirecting users to new URLs without the user or website owner's consent. One of these features has the potential to stop malvertising attacks. [...]
	2017-11-08 20:08:45	Windows 10 Insider Build 17035 for PC Introduces the Near Share Sharing Feature (lien direct)	Today Microsoft released Insider Preview BuildÂÂ 17035 for PC to insiders on the fast ring and to those who opted to Skip Ahead. This build will not be made available to computers that have an AMD processor due to a known bug that causes these computers to bugcheckÂÂ during an upgrade.ÂÂ [...]
	2017-11-08 18:15:14	Cryptojacking Craze: Malwarebytes Says It Blocks 8 Million Requests per Day (lien direct)	The in-browser cryptojacking craze that has taken over the Internet is getting worse by the day and more and more sites are implementing such systems, intentionally or after getting hacked. [...]
	2017-11-08 16:16:00	Hacker Wannabes Fooled by Backdoored IP Scanner (lien direct)	Wannabe hackers looking to create their very own Reaper botnet might have gotten more than they asked when they downloaded an IP scanner over the past few weeks. [...]	Cloud	APT 37
	2017-11-08 09:35:17	Logitech Will Intentionally Brick All Harmony Link Devices Next Year (lien direct)	Logitech will intentionally brick all Harmony Link universal hubs next year, on March 16, 2018. The company has emailed all Harmony Link customers with the bad news. [...]
	2017-11-08 07:42:43	Here\'s What You Need to Know About Mozilla\'s New Firefox Browser Coming Next Week (lien direct)	In less than a week, Mozilla will flip the switch on a completely new browser with the release of Firefox 57, a version that's been rebuilt with a new browser engine core, a new user interface, revamped settings panel, and with a new add-ons API. [...]
	2017-11-08 05:20:22	Intel\'s Secret CPU-On-Chip Management Engine (ME) Runs on MINIX OS (lien direct)	One of the world's lesser-known operating systems may actually be the most used OS in the world, according to new revelations made by Google's Linux experts. [...]
	2017-11-08 01:00:00	Amazon Updates AWS Dashboard to Warn Admins When They\'re Exposing S3 Buckets (lien direct)	Following a long string of data leaks caused by misconfigured S3 servers, Amazon has decided to add a visible warning to the AWS backend dashboard panel that will let server admins know if one of their buckets (storage environments) is publicly accessible and exposing potentially sensitive data on the Internet. [...]
	2017-11-07 18:05:06	Linux Has a USB Driver Security Problem (lien direct)	USB drivers included in the Linux kernel are rife with security flaws that in some cases can be exploited to run untrusted code and take over users' computers. [...]
	2017-11-07 15:55:38	Firefox 57 to Feature Option for Always-On Tracking Protection (lien direct)	Firefox 57, scheduled for release next week, will add a new option to allows users to turn on the browser's Tracking Protection feature all the time, not just in Private Browsing mode. [...]
	2017-11-07 13:48:27	Dnstwist Helps You Find Phishing Sites Based on Your Domain (lien direct)	DnstwistÂÂ that allows you to detect phishing, typo squatters, and attack domainsÂÂ that are based on an inputted domain. If you are a site ownerÂÂ or in charge of your company's domain management and brand safety, this tool can be of great use in seeing sites that are trying to harm others by pretending to be your brand. [...]
	2017-11-07 13:32:20	Unknown User Triggers Bug That Freezes $285Mil Inside Ethereum Wallets (lien direct)	On Monday, November 6, an unknown user triggered a bug in the source code of the Parity Ethereum wallet that has permanently locked funds inside users' accounts. [...]
	2017-11-07 10:30:55	Google Patches KRACK WPA2 Vulnerability in Android (lien direct)	Google has published this month's Android security bulletin, and the company provided a fix for the KRACK vulnerability that came to light last month. [...]
	2017-11-07 09:31:09	Researcher Details New Windows Code Injection Technique Named PROPagate (lien direct)	A security researcher has discovered a new code injection technique that works on all recent Windows versions and allows miscreants to inject malicious code into other applications undetected. [...]
	2017-11-07 04:43:05	Facebook to Fight Revenge Porn by Letting Potential Victims Upload Nudes in Advance (lien direct)	Facebook is testing new technology that is designed to help victims of revenge porn acts. This new tool is currently under testing in Australia, and the company says it plans to expand it to other countries if everything goes well. [...]
	2017-11-06 18:55:44	Misconfigured Amazon S3 Buckets Expose Users, Companies to Stealthy MitM Attacks (lien direct)	Hackers can exploit exposed Amazon S3 buckets to carry out silent Man-in-the-Middle attacks or other hacks on a company's customers or internal staff. [...]
	2017-11-06 17:47:44	Microsoft Releases Standards for Highly Secure Windows 10 Devices (lien direct)	Yesterday, Microsoft released new standards that consumers should follow in order to have a highly secure Windows 10 device. These standards include the type of hardware that should be included in the system and the firmware features. [...]
	2017-11-06 16:08:56	Comcast Xfinity Internet Service Down Across Large Parts the US (lien direct)	Comcast Xfinity Internet service is down in large areas of the US due to unknown reasons, according to multiple online reports. [...]
	2017-11-06 16:08:56	(Déjà vu) Comcast Xfinity Internet Service Down Across Large Parts of the US (lien direct)	Comcast Xfinity Internet service is down in large areas of the US due to unknown reasons, according to multiple online reports. [...]
	2017-11-06 15:22:31	Get Watch_Dogs on PC for Free Starting Tomorrow (lien direct)	Starting tomorrow at 11am EST and ending on November 13th, Ubisoft is giving away free licenses of Watch_Dogs for PC. For those who are unfamiliar with Watch_Dogs, the game revolves around a hacker who seeks revenge on those who hurt his family. [...]
	2017-11-06 14:10:36	Popular Firefox Bookmark Syncing Add-On Starts Losing... Bookmarks (lien direct)	Users of the Firefox Xmarks bookmark syncing add-on are reporting various problems with the plugin, some of which include corrupted bookmarks, failed sync operations, or popup spamming. [...]
	2017-11-06 11:48:38	GIBON Ransomware Being Sold on Underground Criminal Forums (lien direct)	Last week we posted an analysis of the GIBON Rasnsomware that was discovered being spread via malspamÂÂ campaigns. Today, an anonymous source told BleepingComputerÂÂ that this ransomwareÂÂ has been marketed on underground criminal forums since as early as May 2017. [...]
	2017-11-06 00:10:00	Weird iOS Bug Replaces "I" With "A[?]" in Text Messages (lien direct)	iOS versions 11.0.3 and 11.1 are affected by a bug that replaces the letter "I" with "A[?]" in text messages. [...]
	2017-11-04 13:33:46	Popular Anime Site Crunchyroll.com Hijacked to Distribute Malware (lien direct)	Popular Anime site Crunchyroll.com was taken offline this morning due to a hack that caused visitors to be prompted to download a desktop version of their software. This software, though, was not as it seemed because it also included malware that was installed along with it. [...]
	2017-11-04 12:48:11	Student Arrested for Using Keylogger to Change Grades Over 90 Times (lien direct)	This past Thursday, a former University of Iowa student appeared in court on charges of hacking his school and professors and changing grades for himself and a few other fellow students. [...]
	2017-11-04 05:00:00	Crypto Bugs in IEEE Standard Expose Intellectual Property in Plaintext (lien direct)	Due to the usage of weak cryptography in the IEEE P1735 electronics standard, attackers can recover highly-valuable intellectual property in plaintext. [...]
	2017-11-04 03:00:00	Estonia Cancels 760,000 Electronic ID Cards Because of Crypto Flaw (lien direct)	Estonian authorities have decided to block and disable over 760,000 national electronic ID cards due to a cryptographic vulnerability that could allow attackers to clone IDs and forge identities. [...]
	2017-11-03 18:36:12	The Week in Ransomware - November 3rd 2017 - GIBON & ONI (lien direct)	Mostly small variants released this week, but we did have a new ransomware called GIBON that is interesting, and even better, decryptable. The other interesting news is about the ONI ransomware that appears to have be used as a smokescreen or wiper for an extended attack against Japanese companies. [...]
	2017-11-03 17:24:57	GIBON Ransomware Being Distributued by Malspam (lien direct)	A new ransomware has been discovered called GIBON that is being distributed via malspam emails with malicious documents. [...]

Last update at: 2024-08-01 21:18:43
See our sources.

To see everything: Our RSS (filtrered)