RMH Franchise Holdings revealed on Friday that malware had been found on point-of-sale (PoS) systems at the Applebee’s restaurants it operates as a franchise. RMH disclosed the incident on Friday afternoon, which often indicates an attempt to avoid the news cycle and fly under the radar. The company posted a […]
Hacking
US Air Force Hacked for Good at HackerOne’s Bug Bounty Event
106 Security Flaws Identified in Operationally Significant DoD Websites under US Air Force’s Bug Bounty Challenge. A team of white hat hackers working with HackerOne, a vulnerability coordination and bug bounty platform hosted a bug bounty event in collaboration with the US Air Force to identify bugs and security vulnerabilities […]
A flaw in HP Remote Management hardware Integrated Lights-Out 3 leaves expose servers to DoS
Hewlett Packard Enterprise issued a security patch to address a vulnerability (CVE-2017-8987) in HP remote management hardware Integrated Lights-Out 3. Hewlett Packard Enterprise has issued a security patch to address a vulnerability (CVE-2017-8987) in its remote management hardware Integrated Lights-Out 3 that equip the family of HP ProLiant servers. The […]
GITHUB SURVIVED THE BIGGEST DDOS ATTACK EVER RECORDED
ON WEDNESDAY, AT about 12:15 pm ET, 1.35 terabits per second of traffic hit the developer platform GitHub all at once. It was the most powerful distributed denial of service attack recorded to date—and it used an increasingly popular DDoS method, no botnet required. GitHub briefly struggled with intermittent outages as […]
SgxSpectre Attack Can Extract Data from Intel SGX Enclaves
A new variation of the Spectre attack has been revealed this week by six scientists from the Ohio State University. Named SgxSpectre, researchers say this attack can extract information from Intel SGX enclaves. Intel Software Guard eXtensions (SGX) is a feature of modern Intel processors that allow an application to […]
Banking Trojan Found in Over 40 Models of Low-Cost Android Smartphones
Over 40 models of low-cost Android smartphones are sold already infected with the Triada banking trojan, says Dr.Web, a Russia-based antivirus vendor. The security vendor published today a list of 42 Android models its researchers analyzed and found to be infected with the Android.Triada.231 trojan. Triada is a very powerful […]
Virus Knocks Out Cash Registers at Tim Hortons Franchisees
A computer virus is suspected of crashing cash registers this week at over 1,000 Tim Hortons coffee and donuts fast food restaurants. The problem is not yet fully resolved, and some stores are still experiencing problems. The problems appeared earlier this week when XP-based cash registers began crashing. Outages initially affected at […]
CannibalRAT, a RAT entirely written in Python observed in targeted attacks
The CannibalRAT RAT is being used in highly targeted attacks. the experts explained that even if it isn’t very sophisticated it exhibits signs of code cannibalisation from other open-source projects. “The RAT itself is not very sophisticated, and exhibits signs of code cannibalisation from other open-source projects, which contrasts with the command-and-control, using fast flux to […]
New Malware Used in Attacks Aimed at Inter-Korean Affairs
A threat actor apparently interested in inter-Korean affairs continues to launch highly targeted attacks using new pieces of malware and decoy documents referencing North Korean political topics. The cyber espionage group, which experts believe is sponsored by a nation state, has been active for several years, but it managed to […]
Microsoft Partners with Intel to Deliver CPU Microcode Fixes via Windows Updates
Microsoft said today that it would take Intel CPU microcode updates meant to fix the Spectre v2 vulnerability and ship these updates to users via a Windows update package. The announcement is a change of direction in regards to Microsoft’s position towards the Meltdown and Spectre patching process. The complicated […]