Items tagged with security
by
Nathan Ord - Sun, Nov 15, 2020
Attackers with physical access to a device can generally do the most damage to a machine. This remains true with CVE-2020-8705, where an attacker with physical access can gain control of the system firmware while the device resumes from a...
Read more...
by
Paul Lilly - Mon, Oct 19, 2020
We are all adapting to life amid a pandemic, with many people working from home as COVID-19 continues to spread. But it is not just newfound telecommuters who are adapting. So are malware authors, who are changing their lures in attempts...
Read more...
by
Paul Lilly - Fri, Oct 16, 2020
A security firm warns that an "unskilled attacker" could leverage a security flaw in SonicWall VPN (virtual private network) appliances to run arbitrary code remotely, causing a persistent denial of service (DoS) condition. Or put more...
Read more...
by
Paul Lilly - Mon, Oct 12, 2020
There is a hacking campaign to disrupt this year's presidential election in the United States, according to a warning issued by the Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA). Hackers...
Read more...
by
Nathan Ord - Sun, Oct 11, 2020
Approximately two weeks ago, the U.S. military’s Cyber Command, under the National Security Agency (NSA), executed a coordinated attack on the Trickbot botnet. This attack included sending disconnect commands to computers infected with the...
Read more...
by
Paul Lilly - Tue, Oct 06, 2020
Cupertino, we may have a problem. A researcher claims Apple's T2 security chip is vulnerable to an exploit that, if leveraged, would give an attacker full root access and kernel execution privileges. Normally this sort of thing would...
Read more...
by
Paul Lilly - Wed, Sep 30, 2020
Oh great, as if 2020 has not been challenging enough already, the latest Digital Defense Report from Microsoft outlines some troubling cybersecurity trends. Threat actors are "rapidly" increasing the sophistication of their cyberattacks...
Read more...
by
Paul Lilly - Tue, Sep 29, 2020
Amazon is currently training a bunch of psychics, who will then license their talents to businesses across the US to read people's palms to determine their future, specifically to see if they pose a security threat. Just kidding! There...
Read more...
by
Brittany Goetting - Sun, Sep 27, 2020
Malware known as Joker is no laughing matter, especially if you have downloaded an infected app that could bring its payload. The Zscaler ThreatLabZ research team recently discovered seventeen Android apps with Joker malware. These...
Read more...
by
Paul Lilly - Fri, Sep 25, 2020
There is a very good reason why the Department of Homeland Security recently issued an emergency directive to federal agencies to patch their Windows Servers against Zerologon. Just five days after the directive, Microsoft confirmed on...
Read more...
by
Brandon Hill - Tue, Sep 22, 2020
When it comes to troublesome data breaches, this one is pretty significant, and it comes from a surprising company. The company in question is Microsoft, which left one of its backend servers that runs the Bing mobile app wide open. As a...
Read more...
by
Nathan Ord - Sun, Sep 20, 2020
Earlier in the week, we reported on a dangerous exploit with Windows domain controllers called Zerologon. Now, the Cybersecurity and Infrastructure Security Agency (CISA), under the Department of Homeland Security direction, is issuing...
Read more...
by
Nathan Ord - Sat, Sep 19, 2020
If any of you out there are running the Firefox browser app for Android, please update immediately. Versions below Firefox version 79 on mobile are vulnerable to exploitation of Android intent URIs. This attack uses SSDP payloads to...
Read more...
by
Nathan Ord - Thu, Sep 17, 2020
Typically, ransomware attacks that are seemingly on the increase around the globe are the cause of financial loss and lack of productivity. However, a ransomware attack on a hospital in Germany has reportedly led to the first known death...
Read more...
by
Nathan Ord - Thu, Sep 17, 2020
Google’s Account Protection Program is their strongest level of account security for those who are at higher risk for attack. Now, Google Chrome is expanding protections for the Advanced Protection users by improving download scanning...
Read more...
by
Ben Funk - Sat, Sep 12, 2020
These days just about everybody takes Bluetooth for granted. Manufacturers phase out useful physical ports like headset jacks in high end devices with the expectation that buyers will use Bluetooth headphones. Our cars, watches, locator...
Read more...
by
Paul Lilly - Tue, Sep 08, 2020
Imagine this—you're having a good day, your PC is running smoothly, and you decide to install a custom Windows 10 theme, but then all of a sudden things go wrong. Very wrong. As in, you find out your Microsoft account has been compromised...
Read more...
by
Nathan Ord - Fri, Sep 04, 2020
They say with great power comes great responsibility, and you would think Windows Defender would be incredibly responsible -- at least when it comes to security. As it turns out, however, that Windows Defender shared its “great power” in...
Read more...
by
Nathan Ord - Fri, Sep 04, 2020
Private threat analysis and mitigation company, HYAS, is buying user data from phone apps to try to track hackers. A major side-effect of this, though, is that regular users are possibly being ensnared and HYAS claims they can track people...
Read more...
by
Paul Lilly - Fri, Sep 04, 2020
There is a cumulative update available for Windows 10 that is packed to the rafters with bug fixes and various improvements, and most people are probably unaware it exists. That's because it is currently only available as an optional...
Read more...
by
Nathan Ord - Thu, Sep 03, 2020
In 2013, Edward Snowden released information on the U.S. Government regarding the mass surveillance and aggregation of data in America. Now, a U.S. Appellate Court has deemed the mass surveillance unconstitutional and thus illegal.
As...
Read more...
by
Nathan Ord - Mon, Aug 31, 2020
Traditionally, Macs weren't often a target for malware campaigns given their relatively small share of the overall computing market. This notion has changed over the years, however, but Apple has fought back with increased security...
Read more...