Engineers at Chinese firm Lenovo have identified a backdoor in the networking switched namely Rackswitch and BladeCenter firmware. The company stated that the backdoor, referred to in the company’s security advisory (CVE-2017-3765) as “HP backdoor,” was discovered after carrying out an internal security audit of firmware for all the products […]
Année : 2018
Cisco’s new tool will detect malware in encrypted traffic
On January 10, Cisco’s officially released its software platform Encrypted Traffic Analytics (ETA) that can keep a check on network packet metadata so as to detect malicious traffic. The software was previously launched in June 2017 but it has remained in private preview ever since because only enterprises were able […]
Hacker demands ransom in Bitcoin after taking over hospital servers
It is a fact that the healthcare industry has been a lucrative target for cyber criminals around the world with increasing incidents involving malware attacks on medical centers and hospitals. While cybercriminals do what they are good at, the blame also falls to institutions who do not take their online security […]
Security event in Taiwan ‘rewards’ quiz winners with malware-laden USB drives
It was, literally and otherwise, more stick than carrot for some winners of a recent data-security contest in Taiwan, who must have been stuck for words after their prizes turned out to be malware-riddled USB sticks. The country’s Criminal Investigation Bureau (CIB) handed out 250 USB thumb drives to members […]
FBI supports & blames encryption for 7,800 devices it can’t unlock
FBI (Federal Bureau of Investigation) director blames encryption for thousands of phones the Bureau could not unlock but then he also supports “strong encryption.” FBI director Christopher Wray said during a conference that the Bureau in 2017 failed to open 7,800 mobile devices and view their contents. The reason for this was […]
Necurs Botnet back after Christmas break. Still delivering Globeimposter ransomware via fake documents.
Necurs Botnet back after Christmas break. Still delivering Globeimposter ransomware via fake documents. After more than a 2 week break for the holidays, Necurs botnet has kicked back into gear tonight.The next in the never ending series of malware downloaders from the Necurs botnet is an email with the subject of Document No 21941954 ( […]
Belle Fourche (S.D.) city hall hit with ransomware
The small city of Belle Fourche, S.D. was hit with a ransomware attack late last week with the malware encrypting at least some files and demanding a ransom. The Black Hills Pioneer reported that at least two computers were locked up starting on January 4 with city workers eventually losing […]
Spyware targets North Korean dissidents via social links, says McAfee
Researchers at security firm McAfee have confirmed that social networks are being used to target North Korean dissidents with spyware An investigation into a spyware campaign against North Korean defectors, journalists and groups or individuals that help them, has revealed that the attacks are highly targeted. The investigation follows reports […]
Linux vs Meltdown: Ubuntu gets second update after first one fails to boot
Linux vs Meltdown: Ubuntu gets second update after first one fails to boot Canonical, the company that makes Linux distro Ubuntu, has re-released its Meltdown update for Ubuntu 16.04 LTS Xenial users after the first attempt tripped up machines. Canonical managed to get its fix for the Meltdown CPU bug […]
MS-ISAC Releases Advisory on PHP Vulnerabilities Original release date: January 09, 2018
The Multi-State Information Sharing & Analysis Center (MS-ISAC) has released an advisory on multiple Hypertext Preprocessor (PHP) vulnerabilities. An attacker could exploit one of these vulnerabilities to take control of an affected system. NCCIC/US-CERT encourages users and administrators to review MS-ISAC Advisory 2018-003 and the PHP Downloads page and apply […]