Threats, Cyberattacks & Vulnerabilities

EternalRocks malware: What exploits are in it?

When NSA cyberweapons went public, attackers bundled them into the EternalRocks malware. Nick Lewis takes a closer look at this new threat and explains what's lurking inside. Continue Reading

By

• Nick Lewis

NSA cyberweapons report follows Kaspersky transparency plan

A Kaspersky transparency initiative and a full code review of its products are on the way, and a new Kaspersky statement explained how NSA cyberweapons were uploaded to its servers. Continue Reading

By

• Michael Heller, TechTarget

Samsung S8 iris scanner: How was it bypassed?

Hackers bypassed the Samsung S8 iris scanner, which could spell trouble for biometric authentication. Expert Nick Lewis explains how it happened and how to stay protected. Continue Reading

By

• Nick Lewis

HP keylogger: How did it get there and how can it be removed?

A keylogging flaw found its way into dozens of Hewlett Packard laptops. Nick Lewis explains how the HP keylogger works and what can be done about it. Continue Reading

By

• Nick Lewis

Risk & Repeat: DEFCON tackles voting machine security

In this week's Risk & Repeat podcast, SearchSecurity editors discuss DEFCON's efforts to improve voting machine security in the wake of hacking threats during the 2016 election. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

KRACK WPA2 flaw might be more hype than risk

Researchers discover a WPA2 vulnerability and brand it KRACK, but some experts say the early reports overstate the risk of the flaw and downplay the difficulty of an exploit. Continue Reading

By

• Michael Heller, TechTarget

Analyzing the flaws of Adobe's HTTP security headers

A recent patching issue with Flash drew attention to shortcomings with Adobe's HTTP security headers. Judith Myerson discusses the importance of HTTP header security. Continue Reading

By

• Judith Myerson

Equifax website hack blamed on drive-by download attack

Security researchers find drive-by download attacks affecting both Equifax and TransUnion, but Equifax claims systems were not compromised in the website hack. Continue Reading

By

• Michael Heller, TechTarget

DEFCON hopes voting machine hacking can secure systems

The first official report on voting machine hacking from DEFCON suggests the need for pen testing, basic security guidelines and cooperation from local and federal governments. Continue Reading

By

• Michael Heller, TechTarget

How can hackers use subtitle files to control endpoint devices?

New media player vulnerabilities have been exposed that enable hackers to use subtitle files to control devices. Expert Judith Myerson explains how this happens. Continue Reading

By

• Judith Myerson

Foxit Reader vulnerabilities: What can be done to mitigate them?

Two critical, zero-day Foxit Reader vulnerabilities haven't been patched and pose a threat to enterprises. Judith Myerson explains the vulnerabilities and how to mitigate them. Continue Reading

By

• Judith Myerson

Windows 10 patching could make older systems vulnerable

Microsoft's practice of automatic Windows 10 patching could be uncovering vulnerabilities in older systems that can be exploited by attackers, Google researchers said. Continue Reading

By

• Michael Heller, TechTarget

How does an Amazon Echo vulnerability enable attackers to eavesdrop?

Hackers could take advantage of a physical Amazon Echo vulnerability to turn the Echo into a listening device. Judith Myerson explains how this works and what can be done about it. Continue Reading

By

• Judith Myerson

NSA breach leads to theft of government spy software

An NSA contractor became the target of a cyberattack after storing agency spying software on a personal device, and this NSA breach has caused a rise in fears regarding Russia. Continue Reading

By

• Michael Heller, TechTarget

How does the Ursnif Trojan variant exploit mouse movements?

A new version of the Ursnif Trojan uses mouse movements to bypass security efforts by beating sandbox detection. Expert Matthew Pascucci explains how this technique works. Continue Reading

By

• Matthew Pascucci

Equifax breach impact expands, blame game continues

The Equifax breach impact expanded and the company's former CEO answered questions in a congressional hearing, but experts were not satisfied by the answers. Continue Reading

By

• Michael Heller, TechTarget

Yahoo data breach found to affect all 3 billion users

Newly uncovered information indicated that all 3 billion users were affected by the 2013 Yahoo data breach, but Oath claimed passwords and credit card info was safe. Continue Reading

By

• Michael Heller, TechTarget

FBI's Freese: It's time to stop blaming hacking victims

The FBI's Don Freese spoke at the (ISC)2 Security Congress this week about the need to end the practice of blaming hacking victims. But will infosec professionals listen? Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

New WordPress malware: What to do about WP-Base-SEO

A new type of WordPress malware, WP-Base-SEO, disguises itself as an SEO plug-in that opens backdoors. Nick Lewis explains how it works and how to avoid it. Continue Reading

By

• Nick Lewis

Ransomware attackers using more sophisticated techniques

At the (ISC)2 Security Congress, infosec professionals warned of sophisticated ransomware attackers that are using more advanced techniques to encrypt entire networks. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

How does a Magento Community Edition flaw allow remote attacks?

As the Magento Community Edition suffers a new zero-day vulnerability, expert Nick Lewis explains how it's being exploited and how to mitigate the cross-site request forgery flaw. Continue Reading

By

• Nick Lewis

Users plagued by iOS app security issues, according to new research

News roundup: Researchers uncovered a large number of iOS app security risks. Plus, Viacom exposed its critical data through a misconfigured AWS S3 bucket, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Undisclosed SEC breach may have led to illegal stock trades

The U.S. Securities and Exchange Commission admitted a 2016 breach that was previously undisclosed may have enabled threat actors to engage in illegal stock trades. Continue Reading

By

• Michael Heller, TechTarget

How does BrickerBot threaten enterprise IoT devices?

BrickerBot is similar to other IoT malware like Mirai, Hajime and others. Expert Judith Myerson explains what makes BrickerBot different, and what can be done to defend against it. Continue Reading

By

• Judith Myerson

How attackers can intercept iCloud Keychain data

A verification flaw in the synchronization service of iCloud Keychain enables attackers to intercept the data it transfers. Expert Frank Siemons explains what to do about it. Continue Reading

By

• Frank Siemons, RedSec

BlueBorne Bluetooth vulnerabilities affect billions of devices

A set of eight Bluetooth vulnerabilities, branded together as BlueBorne, affect billions of devices and could be one of the most dangerous issues, according to experts. Continue Reading

By

• Michael Heller, TechTarget

The HTML5 vulnerabilities enterprises need to know

Adobe Flash's end of life is coming, but there are some HTML5 vulnerabilities enterprises should be aware of before making the switch. Expert Judith Myerson outlines the risks. Continue Reading

By

• Judith Myerson

Equifax breach response deemed insufficient in multiple ways

Experts criticized the Equifax breach response as insufficient, given the size and scope of the data loss, and they said the company was likely not prepared for such an incident. Continue Reading

By

• Michael Heller, TechTarget

How is Pegasus malware different on Android than on iOS?

Pegasus malware used to only target iOS devices, but a variant called Chrysaor now goes after Android devices, too. Expert Michael Cobb explains what users need to know about it. Continue Reading

By

• Michael Cobb

Six new vulnerabilities in Android bootloaders uncovered

News roundup: Researchers used the new BootStomp tool to uncover six vulnerabilities in Android bootloaders. Plus, a new wave of AWS S3 bucket data leaks strikes and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Apache Struts vulnerability affects versions since 2008

A researcher discovered a remotely exploitable Apache Struts vulnerability being actively exploited in the wild. A patch was released, and users were urged to update software immediately. Continue Reading

By

• Michael Heller, TechTarget

Interception threatens TLS security; now what?

As global cyberattacks have exploded in recent months, the speed of infection is causing damage, not only to targeted industries and nation states, but to corporate valuations. In June, FedEx warned that the Petya cyberattack, which disrupted operations at its TNT Express subsidiary, may have "material impact" on the company's 2017 financial performance. Merck & Co. Inc., another victim of the cyberattack, issued a similar warning. A Trojan that morphed into a worm, Petya -- sometimes called NotPetya -- brought increased attention to the lack of security fundamentals practiced at major companies.

The majority of these threats enter networks through malware delivered via the internet. However, as the growth of HTTPS deployment continues, some companies are increasingly using Transport Layer Security (TLS) interception by middleboxes to maintain visibility into TLS security and malicious software. Researchers from top universities and technology companies, including Google, Mozilla and Cloudflare, published an HTTPS interception study in April that offered startling statistics on TLS security.

In this issue of Information Security magazine, we look at how worms play a role in advanced persistent threats and the ongoing issues related to HTTPS inspection and TLS security.

 Continue Reading

Kaspersky-Russian ties still unclear, despite FBI push

The specter of Kaspersky-Russian ties has reportedly led to an FBI campaign urging private organizations to drop Kaspersky Lab products; experts urge the FBI to share more evidence. Continue Reading

By

• Michael Heller, TechTarget

U.S. government cybersecurity is a mess, according to officials

News roundup: John McCain, NIAC and others called out the administration for not doing enough on U.S. government cybersecurity. Plus, the Ropemaker exploit alters emails, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Cryptography attacks: The ABCs of ciphertext exploits

Encryption is used to protect data from peeping eyes, making cryptographic systems an attractive target for attackers. Here are 18 types of cryptography attacks to watch out for. Continue Reading

By

• (ISC) 2

ATMitch malware: Can fileless ATM malware be stopped?

How was the ATMitch malware able to loot cash machines, then delete itself? Expert Nick Lewis explains how the fileless malware works and how it spreads. Continue Reading

By

• Nick Lewis

Destruction of service: How ransomware attacks have changed

New ransomware variants have introduced another threat to enterprises. Rob Shapland explains what destruction of service attacks are and how organizations should prepare for them. Continue Reading

By

• Rob Shapland

iPhone Secure Enclave firmware encryption key leaked

Experts and Apple say despite the leak of the iPhone Secure Enclave Processor encryption key that can be used to decrypt firmware code, user data and biometric information are still safe. Continue Reading

By

• Michael Heller, TechTarget

How does the MajikPOS malware evade detection?

A new POS malware downloads a RAM scraper to avoid detection. Expert Nick Lewis explains the tricks MajikPOS uses to target retail terminals and how to defend against it. Continue Reading

By

• Nick Lewis

Valerie Plame: U.S. government cyberdefense must be improved

Former CIA officer Valerie Plame discusses why America's cyberdefense is lagging behind -- and what the government and private sector should do to reverse the trend. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Why is the patched Apache Struts vulnerability still being exploited?

An Apache Struts vulnerability is still being exploited, even though it has already been patched. Expert Nick Lewis explains why the Struts platform still carries risk for users. Continue Reading

By

• Nick Lewis

Offensive cyberweapons from enemies may be re-engineered

The U.S. Defense Intelligence Agency wants to isolate, study, customize and re-engineer malware from adversaries to be used as its own offensive cyberweapons. Continue Reading

By

• Michael Heller, TechTarget

NotPetya ransomware impact costs Maersk hundreds of millions

Danish shipping giant A.P. Moller-Maersk said the NotPetya ransomware attacks severely damaged business processes and the impact has been estimated at as much as $300 million in lost revenue. Continue Reading

By

• Michael Heller, TechTarget

How does CrashOverride malware threaten industrial control systems?

CrashOverride malware targets industrial control systems and can wreak havoc. Expert Judith Myerson explains the capabilities of the malware and what to do to stop it. Continue Reading

By

• Judith Myerson

Microsoft antivirus policy changes under Kaspersky pressure

Microsoft antivirus policy changes for Windows 10 Fall Creators Update in order to avoid further action in an antitrust case brought by Kaspersky. Continue Reading

By

• Michael Heller, TechTarget

U.S. attorney: Gathering cybercrime evidence can be difficult

Assistant U.S. attorney says jurors and courts are getting smarter about cybercrime evidence, although digital cases overall may be getting more difficult to prosecute. Continue Reading

By

• Michael Heller, TechTarget

Risk & Repeat: Voting machine hacking brings good and bad news

In this week's Risk & Repeat podcast, SearchSecurity editors look back at DEFCON 2017's voting machine hacking and what it could mean for the future of U.S. election security. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

FBI: Cyber investigations no different from real world

Despite a loud group claiming the burden of proof is harder to meet with digital evidence, an agent says FBI cyber investigations are not much different from traditional cases. Continue Reading

By

• Michael Heller, TechTarget

How did a Moodle security vulnerability enable remote code execution?

A series of logic flaws in Moodle enabled attackers to remotely execute code on servers. Expert Michael Cobb explains how the Moodle security vulnerability can be exploited. Continue Reading

By

• Michael Cobb

How did flaws in WhatsApp and Telegram enable account takeovers?

Flaws in WhatsApp and Telegram, popular messaging services, enable attackers to break encryption and take over accounts. Expert Michael Cobb explains how the attacks work. Continue Reading

By

• Michael Cobb

MalwareTech arrested for Kronos banking Trojan connection

The FBI arrested the famed security researcher known as MalwareTech after a two-year investigation into the creation and distribution of the Kronos banking Trojan. Continue Reading

By

• Michael Heller, TechTarget

Hacking voting machines takes center stage at DEFCON

DEFCON attendees were successful in hacking voting machines and now that there is proof the systems are insecure, more work needs to be done to change election laws and practices. Continue Reading

By

• Michael Heller, TechTarget

Experts debate Vulnerabilities Equities Process disclosure

Experts debated how the government should weigh disclosure in the Vulnerabilities Equities Process and whether to err on the side of offense or defense. Continue Reading

By

• Michael Heller, TechTarget

Did DDoS attacks cause the FCC net neutrality site to go down?

The FCC net neutrality comment site crashed, and it was blamed on DDoS attacks. Expert Matthew Pascucci looks at the technical side of this incident and what was behind it. Continue Reading

By

• Matthew Pascucci

Adobe's Flash end of life scheduled, finally, for 2020

News roundup: Adobe announced that Flash end of life will happen by the end of 2020. Plus, Microsoft expands its bug bounty program, the 2017 Pwnie Awards winners, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Phishing research shows troubling trends for enterprise users

Karla Burnett of Stripe presented sobering results of phishing research from her company at Black Hat 2017, suggesting phishing training is ineffective against today's threats. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Industroyer malware a turning point for ICS security

Security researchers at Black Hat 2017 analyzed the Industroyer malware, the attack on Ukraine's power grid and what it means for industrial control system security in the U.S. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

SHA-1 collision: How the attack completely breaks the hash function

Google and CWI researchers have successfully developed a SHA-1 attack where two pieces of data create the same hash value -- or collide. Expert Michael Cobb explains how this attack works. Continue Reading

By

• Michael Cobb

How are FTP injection attacks carried out on Java and Python?

Vulnerabilities in Java and Python have opened them up to possible FTP injections. Expert Nick Lewis explains how enterprises can mitigate these attacks. Continue Reading

By

• Nick Lewis

ASLR side-channel attack: How is JavaScript used to bypass protection?

Researchers have developed an ASLR Cache side-channel attack that enables them to eliminate ASLR protections. Expert Nick Lewis explains how JavaScript code is used in the attack. Continue Reading

By

• Nick Lewis

Fancy Bear C&C servers taken down by Microsoft lawsuit

Experts applaud Microsoft for clever use of a lawsuit to claim command and control server domains used by malicious Russian APT group Fancy Bear. Continue Reading

By

• Michael Heller, TechTarget

SQL Slammer worm returns: How risky is it for enterprises?

The SQL Slammer worm has re-emerged to attack a vulnerability in Microsoft SQL Server 2000. Expert Nick Lewis explains what enterprises can do to manage out-of-date systems. Continue Reading

By

• Nick Lewis

Dark web markets' shutdown may lead to more arrests

Cooperation between law enforcement from around the world led to the shutdown of the AlphaBay and Hansa dark web markets and potential leads of illegal vendors. Continue Reading

By

• Michael Heller, TechTarget

How can users protect themselves from the DocuSign phishing email?

A DocuSign phishing email with a link to a malicious Word document recently targeted the company's users. Expert Judith Myerson outlines six ways to avoid this type of attack. Continue Reading

By

• Judith Myerson

Petya malware behavior may change based on AV installed

Researchers found changes in malware behavior when Petya detected certain security products, but experts are unsure why these features might exist. Continue Reading

By

• Michael Heller, TechTarget

Windows NTLM vulnerabilties addressed in July 2017 Patch Tuesday

Client-side security takes the forefront in Microsoft's July 2017 Patch Tuesday, which includes a fix for legacy Windows NTLM authentication processes. Continue Reading

By

• Michael Heller, TechTarget

What made iOS apps handling sensitive data vulnerable to MitM attacks?

A researcher discovered 76 iOS apps containing sensitive user data that were vulnerable to man-in-the-middle attacks. Expert Michael Cobb explains how developers can prevent this. Continue Reading

By

• Michael Cobb

How are hackers using Unicode domains for spoofing attacks?

A proof of concept showed that hackers can use Unicode domains to make phishing sites look legitimate. Expert Matthew Pascucci explains how this spoofing attack works. Continue Reading

By

• Matthew Pascucci

Flawed Broadcom Wi-Fi chipsets get a fix, but flaw remains a mystery

Broadpwn, a flaw in Broadcom Wi-Fi chipsets, is patched, but Google withholds details. Plus, the latest in the antivirus drama between the U.S. and Russia, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Risk & Repeat: NotPetya ransomware raises the stakes

In this week's Risk & Repeat podcast, SearchSecurity editors discuss the NotPetya ransomware, its impact and the growing trend of sophisticated ransomware attacks. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

Windows Defender bug could allow full-system takeover

A newly disclosed Windows Defender bug, which could allow an attacker to fully take over a target system and create admin accounts, marks yet another major antivirus vulnerability. Continue Reading

By

• Michael Heller, TechTarget

Fruitfly Mac malware: How does its decades-old code work?

The Fruitfly Mac malware has decades-old code, but has been conducting surveillance attacks for over two years without detection. Expert Nick Lewis explains how it works. Continue Reading

By

• Nick Lewis

Brutal Kangaroo USB malware could be reverse-engineered

The Brutal Kangaroo USB malware leaked from the CIA's Vault 7 could pose a threat to air-gapped computers if hackers reverse-engineer it. Continue Reading

By

• Michael Heller, TechTarget

Malware in encrypted traffic uncovered with machine learning

Cisco claims it can accurately detect malware activity in encrypted traffic using machine learning, but some experts worry about privacy implications. Continue Reading

By

• Michael Heller, TechTarget

What are HummingWhale malware's new ad fraud features?

A HummingBad malware variant, HummingWhale, was discovered being spread through 20 apps on the Google Play Store. Expert Nick Lewis explains the malware's new features. Continue Reading

By

• Nick Lewis

RNC leak of voter database exposes poor cloud security practices

A massive voter database RNC leak underscores the poor cloud security practices in place in the U.S. government and many enterprises. Continue Reading

By

• Michael Heller, TechTarget

Heartbleed vulnerability: Why does it persist on so many services?

The Heartbleed flaw still impacts almost 200,000 services connected to the internet. Expert Nick Lewis explains why these services remain unpatched and vulnerable. Continue Reading

By

• Nick Lewis

Valerie Plame warns of increased nation-state cyberattacks

At the 2017 Cloud Identity Summit, former covert CIA officer Valerie Plame discussed the increasing risks of nation-state cyberattacks focused on geopolitical influence. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

How did thousands of MongoDB databases get hijacked?

Thousands of MongoDB configurations were hijacked due to poor authentication practices. Expert Nick Lewis explains how organizations can properly configure their implementations. Continue Reading

By

• Nick Lewis

Hidden Cobra hackers target U.S. with DeltaCharlie malware

News roundup: DeltaCharlie malware is a threat to the U.S., according to a US-CERT warning about Hidden Cobra. Plus, a DVR flaw could create a bigger botnet than Mirai, and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Why do HTTPS interception tools weaken TLS security?

HTTPS interception tools help protect websites, but they can also hurt TLS security. Expert Judith Myerson explains how this works and what enterprises can do about it. Continue Reading

By

• Judith Myerson

How do Linksys router vulnerabilities expose user data?

Router vulnerabilities in over 20 Linksys models expose user data to attackers. Expert Judith Myerson explains how the flaws work and how to protect against them. Continue Reading

By

• Judith Myerson

More Windows XP fixes in June Patch Tuesday release

Microsoft's June 2017 Patch Tuesday saw another set of Windows XP fixes released in order to secure systems against leaked NSA cyberweapons. Continue Reading

By

• Michael Heller, TechTarget

How do attackers use Microsoft Application Verifier for hijacking?

Attackers found a way to use Microsoft Application Verifier to hijack security products, like antivirus tools. Expert Judith Myerson explains how it's done and what to do to stop it. Continue Reading

By

• Judith Myerson

How can a NULL pointer dereference flaw create a DoS attack?

A flaw in the open source graphics library libpng enabling denial-of-service attacks was discovered. Expert Michael Cobb explains how the vulnerability works. Continue Reading

By

• Michael Cobb

The Apple Notify flaw: How does it allow malicious script injection?

Flaws in the Apple Notify function and iTunes can enable attackers to inject malicious script into the application side. Expert Michael Cobb explains how these vulnerabilities work. Continue Reading

By

• Michael Cobb

Election cyberattack proves people are still the biggest flaw

A new NSA leak allegedly shows Russian agents engaged in election cyberattacks against local U.S. governments and proves people are still the hardest cybersecurity risk to mitigate. Continue Reading

By

• Michael Heller, TechTarget

Adobe Acrobat Chrome extension: What are the risks?

An Adobe Acrobat extension was automatically installed onto users' Chrome browsers during an update. Expert Michael Cobb explains the problems that existed with the extension. Continue Reading

By

• Michael Cobb

Shadow Brokers dump crowdfunding raises ethical questions

The prospect of monthly NSA cyberweapons leaks in new Shadow Brokers dump raises questions about the ethics of paying criminals for stolen goods. Continue Reading

By

• Michael Heller, TechTarget

Samba vulnerability brings WannaCry fears to Linux/Unix

A widespread Samba vulnerability has raised the possibility of attacks similar to WannaCry hitting Linux and Unix systems, but mitigation options are available. Continue Reading

By

• Michael Heller, TechTarget

Voting machine hacking to be taken on at DEFCON 2017

Possible voting machine hacking has been a topic of conversation since before the 2016 election and at DEFCON 2017; professional pentesters will find out what damage can be done. Continue Reading

By

• Michael Heller, TechTarget

Risk & Repeat: WannaCry ransomware worm shakes tech industry

In this week's Risk & Repeat podcast, SearchSecurity editors look at the devastation caused by the WannaCry ransomware worm and discuss how it could have been prevented. Continue Reading

By

• Rob Wright, Senior News Director, Dark Reading

How does Rakos malware attack embedded Linux systems?

Rakos malware is attempting to build a botnet by attacking embedded Linux systems. Expert Nick Lewis explains how enterprises can prevent attacks on their systems. Continue Reading

By

• Nick Lewis

Windows zero days squashed in May 2017 Patch Tuesday

Microsoft's May 2017 Patch Tuesday fixed multiple Windows zero-day vulnerabilities, two of which have reportedly been exploited by groups linked to Russia. Continue Reading

By

• Michael Heller, TechTarget

Microsoft out-of-band patch hits the day before Patch Tuesday

The evening before Patch Tuesday, Microsoft released an emergency out-of-band patch for a dangerous Windows flaw teased by the Google Project Zero team just days earlier. Continue Reading

By

• Michael Heller, TechTarget

New types of ransomware innovate to find opportunity

There is no shortage of new types of ransomware, many with unique features, and experts say it's an exercise in innovation and finding revenue opportunity. Continue Reading

By

• Michael Heller, TechTarget

SS7 vulnerability allows attackers to drain bank accounts

News roundup: Attackers exploit SS7 vulnerability and drain bank accounts. Plus, Trump signs government IT executive order, an Intel AMT flaw threatens millions and more. Continue Reading

By

• Madelyn Bacon, TechTarget

Why did the PHPMailer library vulnerability have to be patched twice?

After a remote code execution flaw in PHPMailer was patched, the problem persisted, and had to be repatched. Expert Michael Cobb explains how the critical vulnerability works. Continue Reading

By

• Michael Cobb

Google Docs phishing attack grants attacker full Gmail access

A Google Docs phishing attack abused OAuth to give malicious actors full access to a victim's Gmail account and contacts, but Google claims to have blocked the attacks. Continue Reading

By

• Michael Heller, TechTarget

Panasonic Avionics IFE systems: How serious are the vulnerabilities?

Panasonic Avionics' in-flight entertainment system vulnerabilities allow attackers to tamper with passenger seat displays. Expert Michael Cobb explains the impact of these flaws. Continue Reading

By

• Michael Cobb