On the S3 Leaks, Zerodium's Messaging App Bounties, ROPEMAKER, and More

Mike Mimoso and Chris Brook discuss the news of the week, including the recent AWS S3 leaks, Zerodium’s bounty on secure messaging app zero days, Ropemaker, and cobot vulnerabilities. Download: ThreatpostNewsWrapAugust252017.mp3 Music by Chris Gonsalves Show notes: Industrial Cobots Might Be The...

ROPEMAKER Exploit Allows for Changing of Email Post-Delivery

Researchers say a new exploitable attack vector for email, one that could enable the changing of email content content post-delivery, could let attackers bypass security controls and trick victims into clicking through to a malicious site. Details of the exploit called ROPEMAKER, which stands for...

Simple Exploit Allows Attackers to Modify Email Content — Even After It's Sent!

Security researchers are warning of a new, easy-to-exploit email trick that could allow an attacker to turn a seemingly benign email into a malicious one after it has already been delivered to your email inbox. Dubbed Ropemaker stands for Remotely Originated Post-delivery Email Manipulation Attac...