LATEST NEWS
Chinese APT’s New Malware MirageFox Launch Cyber Attack on Government & Military Sectors
Chinese government affiliated APT15 cyberespionage group involving with new MirageFox malware campaign to attack various sectors including …
Google Home and Chromecast vulnerability allows hackers to obtain location data
Google LLC is promising to issue a fix within weeks for an authentication issue within its Google Home speakers and Chromecast devices that …
Lacework study highlights software container vulnerabilities
New research shows that hundreds of organizations are deploying software containers in the public cloud without securing them first. …
It’s time for TLS 1.0 and 1.1 to die (die, die)
As TLS 1.3 inches towards publication into the Internet Engineering Task Force’s RFC series, it’s a surprise to realise that there are …
Google Engineer Ben McIlwain on Why HSTS Could Be a Perfect Fit for .Brands Security
The Google-run .app TLD was always destined to draw attention and scrutiny, from the moment it fetched a then-record ICANN auction price of …
Fraudster admits she was OPM dealer: Leaked US govt staff files used to bag cash, car loans
A woman has fessed up to using people’s personal information, leaked online from the US government’s Office of Personnel Management …
Yubico snatched my login token vulnerability to claim a $5k Google bug bounty, says bloke
Yubico has apologized to a security vulnerability researcher who had complained the dongle peddler lifted his work to nab a $5,000 Google …
S5Mark is a ‘VPN’ that is actually a rootkit in disguise, BitDefender says
While a form of the Zacinlo rootkit has been active for several years, BitDefender said Monday that it has adopted a more sinister …
Lenovo Ups Its Collaboration Game With The ‘Switzerland’ Of UC Devices
Earlier this month, Lenovo announced what looks like a unique addition to its portfolio of meeting room solutions, the ThinkSmart Hub 700. …
Surprise delivery: Amazon HQ receives 150k signatures urging company to stop selling facial recognition software to cops
Community leaders ask Amazon to stop selling Rekognition to police at the company’s Seattle headquarters. (GeekWire Photo / Monica …
Is My Mac Secure from Malware and Viruses?
Do you own a Mac? If so, you might have the common perception that they’re more secure from internet threats than Windows …
Exposed Container Orchestration Systems Putting Many Orgs at Risk
New research confirms that many organizations are deploying workloads to the public cloud without adequate security controls and processes …
$4.3 Million HIPAA Penalty for 3 Breaches
A lack of device encryption will cost a Texas-based cancer treatment center $4.3 million in civil monetary penalties from the Department of …
Not so private eye: Got an Axis network cam? You’ll need to patch it, unless you like hackers
Researchers have detailed a string of vulnerabilities that, when exploited in combination, would allow for hundreds of models of …
CVE-2018-9023 – An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged …
An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing …
‘Wallchart’ Phishing Campaign Exploits World Cup Watchers
Threat actors are capitalizing on the attention surrouncing the 2018 FIFA World Cup, which attracts millions of viewers around the world. …
Cybersecurity Insurance: How Underwriting Is Changing
Cybersecurity insurers, faced with growing demand, are looking for new ways to better measure their risks, says Aleksandr Yampolskiy, CEO …
Mass. Man Pleads Guilty in ATM Jackpotting Operation
A Springfield, Mass., man has pleaded guilty in US District Court for his role in an ATM jackpotting scheme in Connecticut and other …
SamSam ransomware: controlled distribution for an elusive malware
Disclaimer: This is only a partial analysis, as there are manual steps in deploying this …
Lenovo Ups Its Collaboration Game With The “Switzerland” Of UC Devices
Earlier this month, Lenovo announced what looks like a unique addition to its portfolio of meeting room solutions, the ThinkSmart Hub 700. …
Reminder: macOS still leaks secrets stored on encrypted drives
Unbeknownst to many people, a macOS feature that caches thumbnail images of files can leak highly sensitive data stored on …
Buzzword Bingo: Quantum, AI, Blockchain, Crypto
Quantum computing, blockchain, crypto, internet of things: There’s a lot of hype around these technology areas, says Jon Geater of Thales …
Scan QR Codes Safely with the Trend Micro QR Scanner
Using your camera and a QR code scanner on your mobile device, it’s easy to scan a code to download an app or go to a website—a bit too …
Blockchain, Cryptocurrencies, and the Dark Web
Cryptocurrency has been called fuel for the dark web. However, pundits envisage that a time will come when the captains of this ship, the …
A week in security (June 11 – June 17)
Last week on Malwarebytes Labs, we discussed how to protect the online privacy of children, we gave you a spring 2018 overview of exploit …
CVE-2018-12534 – A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress. …
A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for …
Vulnerabilities in these IoT cameras could give attackers full control, warn researchers
Vulnerabilities in almost 400 models of internet connected video camera by one manufacturer could allow attackers to take remote control of …
Data Breach Trends: Attackers’ Dwell Time Deceases, Mostly
Data Breach Trends: Attackers’ Dwell Time Deceases, Mostly But Some EMEA Organizations Weren’t So Lucky, Says Mandiant’s Mike Trevett …
NeuVector Brings Network Security Capabilities to Container Workloads
Multiple security vendors demonstrated their offerings during DockerCon 18, which ran from June 12 -15 in San Francisco, among them was …
The paranoid’s guide to traveling to digitally scary places like Russia or China
Video: World Cup fans …
Incident Response Challenge: Knowing What to Prioritize
Mike Spradbery, security technical leader for the U.K. and Ireland, IBM Much of the push for bringing artificial intelligence – often …
Game Developers Dump ‘Redshell’ Tracking Program After Privacy Backlash
Across Reddit and Steam forums, a few people are getting up in arms about Redshell, a tracking program that game developers use to see how …
DHS, FBI published a join alert including technical details of Hidden Cobra-linked ‘Typeframe’ Malware
The US DHS and the FBI have published a new joint report that includes technical details of a piece of malware allegedly used by the …
7 Ways Cybercriminals Are Scamming a Fortune from Cryptocurrencies
With the cryptocurrency market bonanza in full swing, unscrupulous cybercriminals are cooking up new scams and hacks by the hour, all with …
Firefox fixes critical buffer overflow
Earlier this month Mozilla announced a security advisory (MFSA2018-14) for its Firefox browser, noting that version 60.0.2 of both Firefox …
Intel Warns of Lazy Restore Speculative Execution CPU Risk
2018 has been a challenging year for Intel from a security perspective, as the company has had to deal with multiple issues. Among the most …