Cyber world is a risky business. On one side it has made our life easier, and on other it presents risks. Everything on the cloud can be hacked, and no institution is 100% sade, including government organizations. HackerOne, an ethical hacking company and security research firm, hosted an event in […]
Année : 2018
5 Ways Hackers Can Breach Your Company Undetected
5 Ways Hackers Can Breach Your Company Undetected Security breaches are, quite unfortunately, a common presence in corporate environments. Even companies making effective use of the most recent security solutions such as next generation firewalls, advanced threat protection and security incident and event management (SIEM) systems are not an exception. […]
NEW BEC SPAM CAMPAIGN TARGETS FORTUNE 500 BUSINESSES
Researchers have identified a wave of new business email compromise campaigns targeting Fortune 500 companies that are designed to trick victims into fraudulent wire transfers. Researchers said the campaigns originate from Nigeria and are targeting companies in the retail, healthcare and financial markets. The Nigerian-based business email compromise (BEC) campaigns […]
The Blue Whale Suicide Game : conseils préventifs pour protéger son enfant
Pour protéger nos enfants de ce jeu morbide, on propose aux parents de modifier certains comportements responsables de la réclusion de la victime. Mettre son enfant à l’abri de ce jeu, n’est pas une tâche évidente, dans une époque où même les petits et les adolescents ont un accès libre […]
OMG: Mirai-based Bot Turns IoT Devices into Proxy Servers
In preparation for our talk entitled “IoT: Battle of Bots” at the RootedCon Security conference that will be held in Madrid, Spain this March 2018, the FortiGuard Labs team encountered yet another new Mirai variant. Since the release of the source code of the Mirai botnet, FortiGuard Labs has seen a number […]
Here We Go Again: Intel Releases Updated Spectre Patches
Here We Go Again: Intel Releases Updated Spectre Patches In a press release published on Tuesday, Intel announced it resumed the deployment of CPU microcode firmware updates. These updates are meant to mitigate the Spectre Variant 2 vulnerability —CVE-2017-5715. The Meltdown (CVE-2017-5754) and Spectre variant 1 (CVE-2017-5753) vulnerabilities —which became […]
Microsoft Fixes Windows 10 Vulnerability But Doesn’t
A Google security engineer says Microsoft has failed to properly patch a security flaw affecting Windows 10 and Windows Server 2016 distributions. The flaw affects the Windows Storage Services, a core OS service that manages file transfers and storage operations. More precisely, the vulnerability affects the « SvcMoveFileInheritSecurity » function that Windows […]
The Annabelle Ransomware Is a Horrific Mess
While most ransomware is created to actually generate revenue, some developers create them to show off their « skills ». Such is the case with a new ransomware based off of the horror movie franchise Annabelle. Discovered by security researcher Bart, Annabelle Ransomware includes everything but the kitchen sink when it comes to screwing up […]
Google Researcher Finds Critical Flaws in uTorrent Apps
Google researcher Tavis Ormandy discovered several critical vulnerabilities in the classic and web-based versions of BitTorrent’s uTorrent application. Patches have been released, but it appears that not all flaws have been fixed properly. Ormandy found that the uTorrent Classic and the uTorrent Web apps create an HTTP RPC server on […]
Hacker Detection Firm Vectra Networks Raises $36 Million
Vectra Networks, a cybersecurity firm that helps customers detect “in-progress” cyberattacks, today announced that it has closed a $36 million Series D funding round, bringing the total amount raised to date by the company to $123 million. The company said the investment would be used to expand sales and marketing, […]