Open sourced malware has split into less potent entities, say researchers
A new approach to LinkedIn scamming looks to steal confidential information with a combo of legit links and a plausible message.
We’ve mentioned GRR before – it’s our high-speed, full-system emulator used to fuzz program binaries. We developed GRR for DARPA’s Cyber Grand Challenge (CGC), and now we’re releasing it as an open-source project! Go check it out. Fear GRR Bugs aren’t afraid of slow fuzzers, and that’s why GRR was d...
Tesco Bank has confirmed that some of its customers’ current accounts have been subject to online criminal activity, in some cases resulting in money being withdrawn fraudulently
Attackers would need direct access to Sequoia box
Après 5 années, force est de constater que la fréquence des articles sur ce blog s’allonge, alors même que l’actualité s’emballe, et accapare le temps des auteurs.
Pour cette raison, ce blog est mis en sommeil, tout en restant ouvert [...] Lire la suite
Now it’s time for firms to accelerate compliance plans
The Mirai botnet has been blamed for a cyber-attack which has knocked Liberia's internet offline.
We’re putting our money where our mouth is again. In continued support for New York’s growing infosec community we’re excited to sponsor the upcoming O’Reilly Security Conference. We expect to be an outlier there: we’re the only sponsor that offers consulting and custom engineering rather than just...
The malware steals credentials for banking and social media apps, intercepts and sends SMS messages, and can wipe the phone.
“Artificial intelligence doesn’t exist yet, nor will it for at least the next twenty years,” Ilia Kolochenko, CEO of High-Tech Bridge, told Infosecurity without hesitation at Black Hat Europe on November 4 2016.
Our previous blog posts often mentioned control flow integrity, or CFI, but we have never explained what CFI is, how to use it, or why you should care. It’s time to remedy the situation! In this blog post, we’ll explain, at a high level, what CFI is, what it does, what it doesn’t do, and […]
Cryptography for quantum computers is taking a serious step forward, thanks to the launch of the OpenQuantumSafe Software Project.
Suspected ransomware attack forced cancellation of appointments for days
Last month our Cyber Reasoning System (CRS) -developed for DARPA’s Cyber Grand Challenge– audited a much larger amount of code in less time, in greater detail, and at a lower cost than a human could. Our CRS audited zlib for the Mozilla Secure Open Source (SOS) Fund. To our knowledge, this is the fi...
Most employees admit to ignoring security rules when they feel they have to: i.e., using personal devices to finish work at home.
Skycure found the commercial Android kit secretly recording meetings, taking screenshots and harvesting messaging info.
Tens of thousands affected after staff member is phished
Honeypots analyzed attacks inside AWS, Microsoft Azure, Digital Ocean, Google Cloud, Rackspace and IBM SoftLayer.
Russia's politically motivated Fancy Bear group is actively using the flaw—and a patch won't be available until Election Day.