Threats & Vulnerabilities: Page

How are hackers using Unicode domains for spoofing attacks?

A proof of concept showed that hackers can use Unicode domains to make phishing sites look legitimate. Expert Matthew Pascucci explains how this spoofing attack works.

By Matthew Pascucci • July 7, 2017

Flawed Broadcom Wi-Fi chipsets get a fix, but flaw remains a mystery

Broadpwn, a flaw in Broadcom Wi-Fi chipsets, is patched, but Google withholds details. Plus, the latest in the antivirus drama between the U.S. and Russia, and more.

By Madelyn Bacon • July 7, 2017

Windows Defender bug could allow full-system takeover

A newly disclosed Windows Defender bug, which could allow an attacker to fully take over a target system and create admin accounts, marks yet another major antivirus vulnerability.

By Michael Heller • June 27, 2017

Fruitfly Mac malware: How does its decades-old code work?

The Fruitfly Mac malware has decades-old code, but has been conducting surveillance attacks for over two years without detection. Expert Nick Lewis explains how it works.

By Nick Lewis • June 23, 2017

Brutal Kangaroo USB malware could be reverse-engineered

The Brutal Kangaroo USB malware leaked from the CIA's Vault 7 could pose a threat to air-gapped computers if hackers reverse-engineer it.

By Michael Heller • June 23, 2017

Malware in encrypted traffic uncovered with machine learning

Cisco claims it can accurately detect malware activity in encrypted traffic using machine learning, but some experts worry about privacy implications.

By Michael Heller • June 22, 2017

What are HummingWhale malware’s new ad fraud features?

A HummingBad malware variant, HummingWhale, was discovered being spread through 20 apps on the Google Play Store. Expert Nick Lewis explains the malware's new features.

By Nick Lewis • June 21, 2017

RNC leak of voter database exposes poor cloud security practices

A massive voter database RNC leak underscores the poor cloud security practices in place in the U.S. government and many enterprises.

By Michael Heller • June 21, 2017

Heartbleed vulnerability: Why does it persist on so many services?

The Heartbleed flaw still impacts almost 200,000 services connected to the internet. Expert Nick Lewis explains why these services remain unpatched and vulnerable.

By Nick Lewis • June 20, 2017

Valerie Plame warns of increased nation-state cyberattacks

At the 2017 Cloud Identity Summit, former covert CIA officer Valerie Plame discussed the increasing risks of nation-state cyberattacks focused on geopolitical influence.

By Rob Wright • June 20, 2017

How did thousands of MongoDB databases get hijacked?

Thousands of MongoDB configurations were hijacked due to poor authentication practices. Expert Nick Lewis explains how organizations can properly configure their implementations.

By Nick Lewis • June 19, 2017

Hidden Cobra hackers target U.S. with DeltaCharlie malware

News roundup: DeltaCharlie malware is a threat to the U.S., according to a US-CERT warning about Hidden Cobra. Plus, a DVR flaw could create a bigger botnet than Mirai, and more.

By Madelyn Bacon • June 16, 2017

Why do HTTPS interception tools weaken TLS security?

HTTPS interception tools help protect websites, but they can also hurt TLS security. Expert Judith Myerson explains how this works and what enterprises can do about it.

By Judith Myerson • June 16, 2017

How do Linksys router vulnerabilities expose user data?

Router vulnerabilities in over 20 Linksys models expose user data to attackers. Expert Judith Myerson explains how the flaws work and how to protect against them.

By Judith Myerson • June 15, 2017

More Windows XP fixes in June Patch Tuesday release

Microsoft's June 2017 Patch Tuesday saw another set of Windows XP fixes released in order to secure systems against leaked NSA cyberweapons.

By Michael Heller • June 14, 2017

How do attackers use Microsoft Application Verifier for hijacking?

Attackers found a way to use Microsoft Application Verifier to hijack security products, like antivirus tools. Expert Judith Myerson explains how it's done and what to do to stop it.

By Judith Myerson • June 12, 2017

How can a NULL pointer dereference flaw create a DoS attack?

A flaw in the open source graphics library libpng enabling denial-of-service attacks was discovered. Expert Michael Cobb explains how the vulnerability works.

By Michael Cobb • June 9, 2017

The Apple Notify flaw: How does it allow malicious script injection?

Flaws in the Apple Notify function and iTunes can enable attackers to inject malicious script into the application side. Expert Michael Cobb explains how these vulnerabilities work.

By Michael Cobb • June 8, 2017

Election cyberattack proves people are still the biggest flaw

A new NSA leak allegedly shows Russian agents engaged in election cyberattacks against local U.S. governments and proves people are still the hardest cybersecurity risk to mitigate.

By Michael Heller • June 7, 2017

Adobe Acrobat Chrome extension: What are the risks?

An Adobe Acrobat extension was automatically installed onto users' Chrome browsers during an update. Expert Michael Cobb explains the problems that existed with the extension.

By Michael Cobb • June 6, 2017

Shadow Brokers dump crowdfunding raises ethical questions

The prospect of monthly NSA cyberweapons leaks in new Shadow Brokers dump raises questions about the ethics of paying criminals for stolen goods.

By Michael Heller • May 31, 2017

Samba vulnerability brings WannaCry fears to Linux/Unix

A widespread Samba vulnerability has raised the possibility of attacks similar to WannaCry hitting Linux and Unix systems, but mitigation options are available.

By Michael Heller • May 26, 2017

Voting machine hacking to be taken on at DEFCON 2017

Possible voting machine hacking has been a topic of conversation since before the 2016 election and at DEFCON 2017; professional pentesters will find out what damage can be done.

By Michael Heller • May 26, 2017

How does Rakos malware attack embedded Linux systems?

Rakos malware is attempting to build a botnet by attacking embedded Linux systems. Expert Nick Lewis explains how enterprises can prevent attacks on their systems.

By Nick Lewis • May 23, 2017

Windows zero days squashed in May 2017 Patch Tuesday

Microsoft's May 2017 Patch Tuesday fixed multiple Windows zero-day vulnerabilities, two of which have reportedly been exploited by groups linked to Russia.

By Michael Heller • May 10, 2017