Google Blocked 700,000 Malicious Apps From Play Store in 2017
Google blocked nearly 700,000 Malicious Apps in 2017 alone that violated Google Play Store policies and Malvertising Apps which silently …
Monthly Archives: January, 2018
Security consultant granted bail after ‘hacking’ GoGet systems
A New South Wales court has granted bail to the 37-year-old man accused of accessing the systems of car-sharing service GoGet, after the …
Scarab ransomware: new variant changes tactics
The Scarab ransomware was discovered in June 2017. Since then, several variants have been created and discovered in the …
Google Cloud Least-Privilege Function Goes Live
Google today announced that its custom roles feature for its Cloud IAM (Identity and Access Management) is now available in production …
‘Jackpotting’ ATM Hack Comes to the United States
ATM hackers in Taiwan raked in more than $2 million using a new type of malware attack that manipulated machines into spitting out tons of …
HotSpot Shield review: It’s fast, beautiful, and definitely not for anonymity
HotSpot Shield in brief: P2P …
Australian government cannot handle its own data securely, why give it yours?
It turns out the best way to get your hands on secret government documents in Australia is to head down to a furniture store and buy a …
CVE-2018-6480 – A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation …
A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature (which, for …
CVE-2018-6479 – An issue was discovered on Netwave IP Camera devices. An unauthenticated attacker can cras …
An issue was discovered on Netwave IP Camera devices. An unauthenticated attacker can crash a device by sending a POST request with a huge …
CVE-2018-6476 – In SUPERAntiSpyware Professional Trial 6.0.1254, the SASKUTIL.SYS driver allows privilege …
In SUPERAntiSpyware Professional Trial 6.0.1254, the SASKUTIL.SYS driver allows privilege escalation to NT AUTHORITYSYSTEM because of not …
CVE-2018-6475 – In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking …
In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of …
CVE-2018-6474 – In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows loc …
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or …
CVE-2018-6473 – In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows loc …
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or …
CVE-2018-6472 – In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows loc …
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or …
CVE-2018-6471 – In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows loc …
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or …
CVE-2018-0136 – A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco …
A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router (ASR) 9000 Series …
CVE-2017-18043 – Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to ca …
Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu process …
CVE-2017-16945 – The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to …
The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root …
CVE-2017-16928 – The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbi …
The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges …
CVE-2017-15656 – Password are stored in plaintext in nvram in the HTTPd server in all current versions (< …
Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus …
CVE-2017-15655 – Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version …
Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fixed in …
CVE-2017-15654 – Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0 …
Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allow gaining …
CVE-2017-15653 – Improper administrator IP validation after his login in the HTTPd server in all current ve …
Improper administrator IP validation after his login in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt …
Lazarus Group, Fancy Bear Most Active Threat Groups in 2017
The busiest threat actor groups of 2017 were Sofacy (otherwise known as Fancy Bear or APT28) and the Lazarus Group, security experts …
Windows Defender will strap scareware to its ass-kicking machine
Microsoft will tighten the screws on scummy developers who use scare tactics to frighten people – particularly non-tech savvy folks – …
Trump’s State Of The Union Address Reaches Across The Aisle With One Weird Trick
Pundits praised President Trump’s first State of the Union Address for making new moves toward bipartisanship, or at least pretending to …
Intel names new technology chief amid Meltdown-Spectre fallout
Intel has made a bevy of leadership changes, including the appointment of a new chief technology officer on the heels of the now infamous …
If Robert Mueller Is Fired, the Russia Probe Could Continue
famously nonchalant amid life’s toughest moments. Much of that public calm stems from the fact that he’s a Magnificent Bastard and, …
The Data Center Is Olympus: Operational Approaches to Securing Kubernetes
What is the context for Kubernetes if the data center is Mount Olympus? This is my first question to Alcide co-founder and CTO Gadi Naor in …
Lazarus Group, Sofacy Most Active Criminal Groups in 2017
The busiest cybercriminal groups of 2017 were Sofacy (otherwise known as Fancy Bear of APT28) and the Lazarus Group, security experts …