Question marks over Cabinet use of commercial conferencing tool
Another mass surveillance campaign aimed at Hong Kongers
(This posting is cross-posted between the Zeek blog and the Trail of Bits blog). The Zeek Network Security Monitor provides a powerful open-source platform for network traffic analysis. However, from its network vantage point, Zeek lacks access to host-level semantics, such as the process and user a...
Snail mail ‘phishing’ scam reveals rare sighting of thumb drive threat
Since 2010, VPN usage in the United States has increased by four times
A few weeks ago, we went to the 24th Financial Cryptography (FC) conference and the Workshop on Trusted Smart Contracts (WTSC), where we presented our work on smart contract bug categorization (see our executive summary) and a poster on Echidna. Although FC is not a blockchain conference, it feature...
Secure cloud storage provider leaves user data in an open Amazon S3 bucket
New research finds that all 4G and some 5G networks are vulnerable to DoS attacks
TL;DR: Trail of Bits has developed ntfs_journal_events, a new event-based osquery table for Windows that enables real-time file change monitoring. You can use this table today to performantly monitor changes to specific files, directories, and entire patterns on your Windows endpoints. Read the sche...
More than a third of untrained end users are susceptible to such scams
Homeware giant gets the Magecart treatment
Malgré les efforts des constructeurs, les automates industriels sont loin d’avoir un niveau de sécurité satisfaisant. Trop peu d’entre eux font d’ailleurs l’effort de se lancer dans ce challenge. Si l’on ne peut pas avoir de composants sécurisés, que faire [...] Lire la suite
UK government study claims companies are getting better at mitigating threats
Canadian IT professionals are uniting to fight back against the rising tide of cyber-threats
Voatz allows voters to cast their ballots from any geographic location on supported mobile devices. Its mobile voting platform is under increasing public scrutiny for security vulnerabilities that could potentially invalidate an election. The issues are serious enough to attract inquiries from the D...
South Korea has identified the alleged leader of a sexual abuse ring run using the Telegram app
Trucking company files lawsuit against Total Quality Logistics following February data breach
FireEye research highlights agility of Chinese threat group
Ginp banking Trojan touts non-existent tracker to trick users
Email breach at Canon Business Process Services exposed personal data