Threats & Vulnerabilities: Page

DEF CON report: Election equipment plagued by 10-year-old flaw

The DEF CON report from the 2018 Voting Village paints a troubling picture for election equipment vendors, including a machine with a flaw known since 2007 left unpatched.

By Michael Heller • Sept. 28, 2018

How can live chat widgets leak personal employee data?

Project Insecurity researchers found live chat software leaking personal employee data. Learn how attackers can use this leaked information and data to hurt organizations.

By Nick Lewis • Sept. 28, 2018

Congressional websites need to work on TLS

Congressional websites may not always have the best security, according to Joshua Franklin. Although, senators may be better at website security than House representatives.

By Michael Heller • Sept. 27, 2018

Election website security a mess for states and candidates alike

Joshua Franklin has been researching election website security for congressional candidates, and he found a lot of misconfigurations on official pages and other sites meant to confuse voters.

By Michael Heller • Sept. 27, 2018

Browser Reaper POC exploit crashes Mozilla Firefox

A security researcher developed a proof-of-concept attack on Firefox, called Browser Reaper, which can crash or freeze the browser. But he gave Mozilla short notice of the flaw.

By Madelyn Bacon • Sept. 26, 2018

Android Trojan: How is data being stolen from messaging apps?

Trustlook Labs discovered an Android Trojan stealing data from messaging apps. Learn what mobile security pros should look for to detect this malware with expert Nick Lewis.

By Nick Lewis • Sept. 26, 2018

GoScanSSH: How does this malware work and differ from others?

A group of malware was discovered targeting public SSH servers. However, it avoided certain IP addresses. Discover how this is possible and how the malware works with Nick Lewis.

By Nick Lewis • Sept. 24, 2018

Mirai botnet creators avoid jail time after helping the FBI

News roundup: The Mirai botnet creators will not serve time in prison after they worked with the FBI. Plus, the Department of Defense updated its cyber strategy, and more.

By Madelyn Bacon • Sept. 21, 2018

GovPayNow leak exposes 14 million records dating back six years

Experts question the security audit and government agency vetting that took place before the GovPayNow leak, which affected 14 million customer records dating back six years.

By Michael Heller • Sept. 20, 2018

NSS Labs lawsuit takes aim at CrowdStrike, Symantec and ESET

In an antitrust lawsuit, NSS Labs accused some of the top antimalware vendors in the industry, including CrowdStrike and Symantec, of conspiring to undermine its testing efforts.

By Rob Wright • Sept. 19, 2018

WannaMine cryptojacker targets unpatched EternalBlue flaw

Unpatched systems are still being targeted by the WannaMine cryptojacker, despite warnings and global cyberattacks using the EternalBlue exploit leaked from the NSA.

By Michael Heller • Sept. 18, 2018

How can attackers exploit a buffer underflow vulnerability?

A buffer underflow was found to be caused by a vulnerability in strongSwan's open source VPN. Learn how this is possible and how attackers can exploit it with Judith Myerson.

By Judith Myerson • Sept. 17, 2018

Researchers bring back cold boot attacks on modern computers

The idea of cold boot attacks began 10 years ago, but researchers at F-Secure found the attack can be used on modern computers to steal encryption keys and other data.

By Michael Heller • Sept. 14, 2018

British Airways data breach may be the work of Magecart

News roundup: The British Airways data breach may be the handiwork of hacking group Magecart, according to researchers. Plus, hacker Guccifer will be extradited to U.S., and more.

By Madelyn Bacon • Sept. 14, 2018

How does the SynAck ransomware use Process Doppelgänging?

A technique called Process Doppelgänging was used by the SynAck ransomware to bypass security software. Expert Michael Cobb explains how this technique works and why it's unique.

By Michael Cobb • Sept. 14, 2018

How does Telegram malware bypass end-to-end encryption?

A Telegram malware called Telegrab targets Telegram's desktop instant messaging service to collect and exfiltrate cache data. Expert Michael Cobb explains how Telegrab works.

By Michael Cobb • Sept. 13, 2018

Understanding the risk SQL injection vulnerabilities pose

SQL injection vulnerabilities put a system at risk and are often unknown to users. Discover how this web vulnerability works and how to prevent it with expert Kevin Beaver.

By Kevin Beaver • Sept. 13, 2018

Microsoft patches Windows ALPC flaw exploited in the wild

Microsoft's September 2018 Patch Tuesday release included a fix for the Windows ALPC vulnerability that was exploited in the wild for about two weeks before being patched.

By Michael Heller • Sept. 12, 2018

Trend Micro apps on Mac accused of stealing data

Researchers claimed Trend Micro apps in the Mac App Store were stealing data. The company removed the offending features, but researchers are still not sold on Trend Micro's excuse.

By Michael Heller • Sept. 11, 2018

Robot social engineering works because people personify robots

Brittany 'Straithe' Postnikoff studied robot social engineering and found personification of robots can lead to effective attacks, regardless of whether or not AI is involved.

By Michael Heller • Sept. 11, 2018

How does the Android Rowhammer exploit affect users?

Android Rowhammer is a hardware weakness in older devices that puts users at risk of remote exploits. Expert Michael Cobb explains why it's important to upgrade to newer devices.

By Michael Cobb • Sept. 10, 2018

Another mSpy leak exposed millions of sensitive user records

News roundup: An mSpy leak has again exposed millions of customer records on the internet. Plus, the FIDO Alliance launched a biometrics certification, and more.

By Madelyn Bacon • Sept. 7, 2018

Lazarus Group hacker charged in WannaCry, Sony attacks

The Department of Justice charged one Lazarus Group hacker, Park Jin Hyok, for his role in the WannaCry attack, Sony hack, SWIFT banking theft and more.

By Michael Heller • Sept. 7, 2018

IonCube malware: Who do these malicious files put at risk?

Malicious files posing as legitimate ionCube files were recently found by WordPress and Joomla admins. Learn how the ionCube malware works with expert Nick Lewis.

By Nick Lewis • Sept. 6, 2018

Five Eyes wants to weaken encryption, or legislation may be needed

Five Eyes -- the government intelligence alliance between Australia, Canada, New Zealand, the U.K. and the U.S. -- vows not to weaken encryption, while pushing for encryption backdoors.

By Michael Heller • Sept. 5, 2018