Threats & Vulnerabilities: Page

Microsoft out-of-band patch hits the day before Patch Tuesday

The evening before Patch Tuesday, Microsoft released an emergency out-of-band patch for a dangerous Windows flaw teased by the Google Project Zero team just days earlier.

By Michael Heller • May 9, 2017

New types of ransomware innovate to find opportunity

There is no shortage of new types of ransomware, many with unique features, and experts say it's an exercise in innovation and finding revenue opportunity.

By Michael Heller • May 5, 2017

SS7 vulnerability allows attackers to drain bank accounts

News roundup: Attackers exploit SS7 vulnerability and drain bank accounts. Plus, Trump signs government IT executive order, an Intel AMT flaw threatens millions and more.

By Madelyn Bacon • May 5, 2017

Why did the PHPMailer library vulnerability have to be patched twice?

After a remote code execution flaw in PHPMailer was patched, the problem persisted, and had to be repatched. Expert Michael Cobb explains how the critical vulnerability works.

By Michael Cobb • May 4, 2017

Google Docs phishing attack grants attacker full Gmail access

A Google Docs phishing attack abused OAuth to give malicious actors full access to a victim's Gmail account and contacts, but Google claims to have blocked the attacks.

By Michael Heller • May 4, 2017

Panasonic Avionics IFE systems: How serious are the vulnerabilities?

Panasonic Avionics' in-flight entertainment system vulnerabilities allow attackers to tamper with passenger seat displays. Expert Michael Cobb explains the impact of these flaws.

By Michael Cobb • May 1, 2017

How can enterprises stop the Flip Feng Shui exploit from hijacking VMs?

The Flip Feng Shui attack can target virtual machines. Expert Judith Myerson explains the exploit and describes how to prevent it from hijacking enterprise VMs.

By Judith Myerson • April 25, 2017

Hajime worm fights the forces of evil IoT malware, maybe

News roundup: The Hajime worm is the nicer, sneakier brother of Mirai malware. Plus, the FBI and CIA hunt for the Vault 7 whistleblower, Symantec adds to Zscaler lawsuit, and more.

By Madelyn Bacon • April 21, 2017

Oracle patches Apache Struts exploits, Equation Group vulnerability

There were 299 Oracle patches in the April Critical Patch Update, including a fix for the Apache Struts exploits found in the wild and a vulnerability from the Equation Group dump.

By Michael Heller • April 20, 2017

How does Exaspy spyware disguise itself on Android devices?

Exaspy spyware, which can access messages, video chats and more, was found on Android devices owned by executives. Expert Nick Lewis explains how Exaspy is able to avoid detection.

By Nick Lewis • April 20, 2017

Shadow Brokers’ Windows exploits target unsupported systems

A new release of NSA cyberweapons falls flat, as Windows exploits from the Shadow Brokers have mostly been patched. But unsupported systems are still at risk.

By Michael Heller • April 18, 2017

Shadow Brokers release SWIFT banking and Windows exploits

The Shadow Brokers released another cache of cyberweapons linked to the Equation Group, including Windows exploits and attack details for the SWIFT banking system.

By Michael Heller • April 14, 2017

U.S. election hacking not an act of cyberwarfare, experts say

The government needs a better definition for an act of cyberwarfare, says ex-CIA Director Michael Hayden, because he doesn't think the U.S. election hacking applies.

By Michael Heller • April 13, 2017

CIA Vault 7 tools attributed to hacking group for years

Security researchers said the CIA Vault 7 tools and techniques are linked to cyberattacks over the past six years targeting various foreign entities.

By Michael Heller • April 11, 2017

State Department hack and APT29 prove attacker resilience

News Roundup: 'Hand-to-hand' combat in State Department hack, APT29 has a stealth backdoor, the creator of the internet backs strong encryption, and more.

By Michael Heller • April 7, 2017

How have ARM TrustZone flaws affected Android encryption?

Android encryption on devices using Qualcomm chips can be broken due to two vulnerabilities. Expert Michael Cobb explains how these flaws affect encryption.

By Michael Cobb • April 7, 2017

Chinese hacking group APT10 linked to global trade target

Evidence points to Chinese hacking group APT10 conducting economic espionage in the breach of a trade policy group prior to U.S.-China trade summit talks in Florida.

By Peter Loshin • April 6, 2017

Pegasus malware expands from iOS to Android

One of the more malicious iOS threats -- Pegasus malware -- has made its way to Android devices and it has some dangerous new tricks in its arsenal.

By Michael Heller • April 5, 2017

Symantec certificate authority issues listed by Mozilla developers

Mozilla developers respond to questionable Symantec certificate authority practices, as the security provider questions Google's proposed solutions.

By Peter Loshin • April 4, 2017

Chenxi Wang discusses DEF CON hacking conference, ‘Equal Respect’

Grassroots efforts to shift cultural thinking in information security have had a positive effect, the former professor of computer engineering says.

By Marcus Ranum • April 3, 2017

How did firmware create an Android backdoor in budget devices?

An Android backdoor was discovered in the Ragentek firmware used in almost three million low-cost devices. Expert Michael Cobb explains how to prevent attacks on affected devices.

By Michael Cobb • April 3, 2017

Google’s Project Zero Prize uncovers zero Android remote exploits

After six months, Google's Project Zero Prize competition uncovered zero Android remote exploits: no bugs, no prizes, no entries.

By Peter Loshin • March 30, 2017

How did vulnerabilities in AirWatch Agent and Inbox work?

Flaws in AirWatch Agent and AirWatch Inbox allowed rooted devices to bypass the software's security measures. Expert Matthew Pascucci explains how these vulnerabilities worked.

By Matthew Pascucci • March 30, 2017

Potential SSL API flaw could reveal private keys

A researcher claims to have found Symantec SSL API issues with extremely dangerous consequences, but a lack of evidence causes confusion.

By Michael Heller • March 29, 2017

Cisco issues fix for Vault 7 vulnerability without help from WikiLeaks

News roundup: Cisco fixes a Vault 7 flaw unaided, despite WikiLeaks' pledge to work with vendors. Plus, LastPass flaws leak user data; Apple held hostage by hackers; and more.

By Madelyn Bacon • March 24, 2017