Snowden’s Attorney Urges Canada to Take in Whistleblower Helpers (Part Two)

In our second part of Threatpost’s interview of lawyer Robert Tibbo, who represented former N.S.A. contractor-turned-whistleblower Edward Snowden, Tibbo describes the present day systematic harassment of families that sheltered Snowden while he was in Hong Kong in 2013. Tibbo also describes how h...

NoMachine for Windows DokanFS library buffer overflow vulnerability

NoMachine for Windows is a Windows-based remote desktop application from NoMachine Luxembourg.DokanFS library is one of the file system libraries. A buffer overflow vulnerability exists in the NoMachine for Windows DokanFS library, which can be exploited to cause a denial of service blue screen. ...

The digital entropy of death: BSides Manchester

Last week, I gave a talk at BSides Manchester based on a previous blog series for Malwarebytes Labs called "The digital entropy of death." What do you do when a relative or close friend dies, leaving all of their digital accounts lying around for anyone to break into and make use of? Which...

Security Bulletin: OpenSSL security vulnerability affects z/TPF (CVE-2016-8610)

Summary The "SSL Death Alert" vulnerability for OpenSSL affects z/TPF. Vulnerability Details CVEID: CVE-2016-8610 DESCRIPTION: SSL/TLS protocol is vulnerable to a denial of service, caused by an error when processing ALERT packets during a SSL handshake. By sending specially-crafted packets, a...

Security Bulletin: IBM Security Access Manager is affected by an OpenSSL vulnerability (CVE-2016-8610)

Summary IBM Security Access Manager has addressed the following OpenSSL vulnerability known as "SSL-Death-Alert". Vulnerability Details CVEID: CVE-2016-8610 DESCRIPTION: The SSL/TLS protocol is vulnerable to a denial of service, caused by an error when processing ALERT packets during a SSL...

2345 Security Guard 3.7 2345NsProtect.sys Denial Of Service

Exploit Title: BSOD by IOCTL 0x8000200D in 2345NsProtect.sys of 2345 Security Guard 3.7 Date: 20180513 Exploit Author: anhkgg Vendor Homepage: http://safe.2345.cc/ Software Link: http://dl.2345.cc/2345pcsafe/2345pcsafev3.7.0.9345.exe Version: v3.7 REQUIRED Tested on: Windows X64 CVE : CVE-2018-...

deathpenaltyworldwide.org XSS vulnerability

Open Bug Bounty ID: OBB-615818 Description| Value ---|--- Affected Website:| deathpenaltyworldwide.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Russian hackers sent death threats to US army wives posing as ISIS: Report

By Uzair Amir Reportedly, US military wives were threatened with death threats by This is a post from HackRead.com Read the original post: Russian hackers sent death threats to US army wives posing as ISIS: Report...

“Celebrating Stephen Hawking” with a 419 scam

The recently departed Stephen Hawking is apparently back from the dead, now a target for scammers wanting to extract some quick cash from the unwary in the form of a vaguely surreal 419 scam. The whole thing begins with an email from, er, Stephen Hawking titled "Celebrating Stephen Hawking." Clic...

The digital entropy of death: link rot

Hot on the heels of a grim blog about digital death comes…another blog about digital death. Except in this case, the recently deceased would be the links that tie the web together, otherwise known as link rot. Link rot is a weird thing. Say I blog for Puppy Chow and I write an article about the...

Hacker Adrian Lamo who tipped off FBI about Chelsea Manning dies at 37

By Waqas Adrian Lamo, a hacker who was once in the news This is a post from HackRead.com Read the original post: Hacker Adrian Lamo who tipped off FBI about Chelsea Manning dies at 37...

CVE-2018-6319

In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. This argument is a memory address: if a caller passes a NULL pointer or a random invalid address, the driver will cause a Blue Screen of Death. If a program or malware does this ...

Friday Squid Blogging: Squid that Mate, Die, and Then Sink

The mating and death characteristics of some squid are fascinating. Research paper. EDITED TO ADD 2/5: Additional info and photos. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Microsoft’s Jan. 2018 Patch Tuesday Lowdown

Microsoft on Tuesday released 14 security updates, including fixes for the Spectre and Meltdown flaws detailed last week, as well as a zero-day vulnerability in Microsoft Office that is being exploited in the wild. Separately, Adobe pushed a security update to its Flash Player software. Last week...

K7 AntiVirus Denial of Service Vulnerability (CNVD-2018-01153)

K7 AntiVirus is home user friendly virus removal software that protects computers from viruses, Trojans, malware and spyware threats. A denial of service vulnerability exists in the driver file K7FWHlpr.sys in K7 AntiVirus 15.1.0306. The vulnerability arises due to an unverified input value from...

‘Dark Overlord’ Hackers Leak Student Data After Sending Death Threats

By Waqas On October 2nd, an unknown group sent death threats to This is a post from HackRead.com Read the original post: ‘Dark Overlord’ Hackers Leak Student Data After Sending Death Threats...

App Layering/Unidesk: Boot failure after windows updates cmimcext.sys

Windows updates causes server to fail boot with error message file missing cmimcext.sys. BSOD with0xc000000f stop code. This can apply to a newly imported OS layer or to a new version of an existing OS layer...

Petya expands its scope: A global ransomware threat

Ransomware remains a formidable threat for individual users and businesses alike, particularly as new sample families continue to be discovered by security researchers. What makes ransomware so dangerous is the fact that victims are denied access to their most important files and data - a problem...

CVE-2016-8610: to cause a denial of service“SSL-Death Alert”vulnerability patch analysis-vulnerability warning-the black bar safety net

Recently, one for OpenSSL Red AlertSSL Death Alertvulnerability security patch caught our attention. Other serious security vulnerabilities, this vulnerability also caught our attention, because according to the vulnerability discoverer said, there is this vulnerability of OpenSSL Web servermay b...

Even A Single Computer Can Take Down Big Servers Using BlackNurse Attack

Yes, you only need a single laptop with a decent internet connection, rather a massive botnet, to launch overwhelming denial of service DoS attacks in order to bring down major Internet servers and modern-day firewalls. Researchers at TDC Security Operations Center have discovered a new attack...