Threats & Vulnerabilities: Page

Apple’s confidential iBoot source code leaked online

News roundup: Apple's highly protected iBoot source code was leaked online. Plus, the U.S. Consumer Financial Protection Bureau stops its Equifax breach investigation, and more.

By Madelyn Bacon • Feb. 9, 2018

Mobile security issues require a unified approach

Security gaps in mobile devices can be many and varied, but they must be addressed immediately. Unified endpoint management is the next-gen way to close the gaps.

By Kevin Beaver • Feb. 8, 2018

DoJ breaks up Infraud Organization with some help

The U.S. Department of Justice announced the shutdown of the Infraud Organization, which authorities claim is responsible for global cyberfraud losses in excess of $530 million.

By Peter Loshin • Feb. 8, 2018

Grammarly vulnerability exposed user documents

A Grammarly vulnerability in its browser extension authentication could have exposed users' sensitive documents if the popular spelling and grammar checker were left unpatched.

By Madelyn Bacon • Feb. 7, 2018

Cryptojacking malware using EternalBlue to build botnets

Proofpoint researchers discovered a large Monero mining botnet that uses EternalBlue to spread, and it isn't the first time the Windows flaw has been used for cryptojacking.

By Rob Wright • Feb. 5, 2018

Hackers use ATM jackpotting technique to steal $1M in US

News roundup: Hackers used ATM jackpotting attacks to steal over $1M in the U.S. Plus, a fitness tracking app accidentally exposed the locations of military bases, and more.

By Madelyn Bacon • Feb. 2, 2018

Meltdown and Spectre malware discovered in the wild

Nearly 140 samples of malware that exploit the Meltdown and Spectre vulnerabilities have been discovered by AV-TEST, but most samples are based on existing proof-of-concept code.

By Rob Wright • Feb. 1, 2018

RSA-1024 keys: How does a Libgcrypt vulnerability expose them?

A Libgcrypt vulnerability could allow attackers to recover private RSA-1024 keys, as it allows a left-to-right sliding window that shows how specific parts of the algorithm work.

By Nick Lewis • Jan. 31, 2018

CopyCat malware: How does this Android threat operate?

Check Point researchers discovered new Android malware named CopyCat, which has infected 14 million devices. Learn how this malware works and how it spread from expert Nick Lewis.

By Nick Lewis • Jan. 30, 2018

Critical Cisco ASA vulnerability patched against remote attacks

Experts urge users to patch a new Cisco ASA vulnerability that earned the most critical CVSS score of 10.0 and could lead to remote code execution and denial-of-service attacks.

By Michael Heller • Jan. 30, 2018

Microsoft rushes Spectre patch to disable Intel’s broken update

Microsoft was forced to release an out-of-band Spectre patch designed not to mitigate the vulnerability but to protect users from Intel's broken fix.

By Michael Heller • Jan. 30, 2018

Cryptojacking: How to navigate the bitcoin mining threat

Due to the rising value of bitcoin and other cryptocurrency, hackers have started to use cryptojacking to mine bitcoin. Learn what this means for end users with expert Nick Lewis.

By Nick Lewis • Jan. 30, 2018

Devil’s Ivy vulnerability: How does it put IoT devices at risk?

A gSOAP flaw was found in an Axis Communications security camera and branded the Devil's Ivy vulnerability. Learn how it threatens IoT devices with expert Nick Lewis.

By Nick Lewis • Jan. 29, 2018

Intel Spectre vulnerability memo raises questions of OEM disclosures

Intel first learned of the Spectre vulnerabilities on June 1, but a confidential document shows the chipmaker didn't inform OEM partners until almost six months later.

By Rob Wright • Jan. 26, 2018

Electron framework flaw puts popular desktop apps at risk

The Electron framework -- used to develop desktop apps using web code -- included a remote code execution flaw that was passed on to popular apps like Slack.

By Michael Heller • Jan. 25, 2018

How are middleboxes affecting the TLS 1.3 release date?

Despite fixing important security problems, the official TLS 1.3 release date keeps getting pushed back, in part due to failures in middlebox implementations.

By Loganaden Velvindron • Jan. 25, 2018

Gemalto Sentinel flaws could lead to ICS attacks

Security researchers found 14 vulnerabilities in Gemalto Sentinel hardware tokens, which could allow dangerous ICS attacks, including full-system takeover.

By Michael Heller • Jan. 23, 2018

Intel Meltdown patches pulled with little explanation

Intel claims it has determined why the Spectre and Meltdown patches caused issues on some chips. The vendor is working on a fix and suggests users don't patch for now.

By Michael Heller • Jan. 23, 2018

Trisis ICS malware was publicly available after attack

The Trisis ICS malware used in a cyberattack on an oil and gas company in Saudi Arabia in December has been publicly available for weeks after being copied by unknown actors.

By Michael Heller • Jan. 19, 2018

What do Dnsmasq vulnerabilities mean for Android users?

Researchers found several Dnsmasq vulnerabilities that affect Google's Android operating system. Matt Pascucci explains how these flaws can be exploited by threat actors.

By Matthew Pascucci • Jan. 19, 2018

Confused deputy: How did the vulnerability affect Slack?

A major SAML vulnerability was found in Slack that granted expired login credentials permission into the system. Matt Pascucci explains how this 'confused deputy' problem was handled.

By Matthew Pascucci • Jan. 17, 2018

CIA attributes NotPetya attacks to Russian spy agency

The CIA reportedly concluded that Russia's foreign intelligence agency created and was responsible for the NotPetya attacks against Ukraine in June.

By Michael Heller • Jan. 16, 2018

Intel Meltdown patch causes issues with Broadwell and Haswell

Customers reported the firmware Intel Meltdown patch caused reboot issues on Broadwell and Haswell chipsets, leading to a patch review by Intel.

By Michael Heller • Jan. 12, 2018

AMD backtracks on Spectre vulnerabilities, plans microcode updates

AMD initially believed the Spectre vulnerabilities posed "near zero risk" to its chip, but the company this week reversed course and is planning microcode updates for its products.

By Rob Wright • Jan. 12, 2018

Fancy Bears hackers target International Olympic Committee

News roundup: The hacking group called Fancy Bears claims to have hacked the Olympics again. Plus, a former NSA contractor pleads guilty to stealing government data, and more.

By Madelyn Bacon • Jan. 12, 2018