Suspicious Site Containing Tech Scams

Many scams have emerged looking to steal money or information by giving users false information claiming that their computers are infected. After such claims they give the users a phone number to call or a way to pay to solve their issues. A successful attack can lead to stolen credentials or mon...

Google Chrome Bans Chinese SSL Certificate Authorities WoSign and StartCom

As a punishment announced last October, Google will no longer trust SSL/TLS certificate authorities WoSign and its subsidiary StartCom with the launch of Chrome 61 for not maintaining the "high standards expected of CAs." The move came after Google was notified by GitHub's security team on August...

Report: Second quarter dominated by ransomware outbreaks

The second quarter of 2017 brought ransomware to unprecedented levels with worldwide outbreaks that went almost out of control. In scenarios reminiscent of yesteryears worms, WannaCry created global panic as it used a critical vulnerability in the SMBv1 protocol to propagate like wildfire. Within...

July 5, 2017 – Morning Cyber Coffee Headlines – “Isaac Newton” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 5, 2017 - Headlines Carbon Black in the News: Carbon Black’s Cb Defense...

Average Bug Bounty Payments Growing

HackerOne said Monday its average dollar payouts to participants are up, and cross site scripting vulnerabilities cause the biggest headaches for companies. The bug bounty platform provider culled data from the past four years, analyzing 50,000 reported bugs and more than $17 million in payouts t...

FBI: Extortion, CEO Fraud Among Top Online Fraud Complaints in 2016

Online extortion, tech support scams and phishing attacks that spoof the boss were among the most costly cyber scams reported by consumers and businesses last year, according to new figures from the FBI's Internet Crime Complaint Center IC3. The IC3 report released Thursday correctly identifies...

Few Victims Reporting Ransomware Attacks to FBI

Ransomware may have been the most prevalent internet threat of 2016, and WannaCry certainly made it a mainstream conversation, but that doesn’t mean people are reporting incidents to law enforcement. The FBI’s Internet Crime Complaint Center’s annual report published this week counted only 2,673...

FTC Releases Alert on Tech-Support Scams

The Federal Trade Commission FTC has released an alert on technical-support scams. In these schemes, deceptive tech-support operations offer to fix problems that don't exist, placing calls or sending pop-ups to make people think their computers are infected with viruses. Users should not give...

IC3 Issues Internet Crime Report for 2016

The Internet Crime Complaint Center IC3 has released its 2016 Internet Crime Report, describing the numbers and types of cyber crimes reported to IC3. Business Email Compromise BEC, ransomware attacks, tech support fraud, and extortion are all common schemes affecting people in the U.S. and aroun...

A week in security (Jun 12 – Jun 18)

Last week was very busy for the Labs, with a look at so-called numeric tech support scams, a visit to the huge Infosec Europe conference, an exploration of Mac Malware as a Service, and a walk through the myths of online bullying. Elsewhere: A huge click-farm is busted Jaff Ransomware is thwarted...

The numeric tech support scam campaign

There are many different tech support scam TSS campaigns active at any given moment, the majority of them are fueled by malicious adverts the browser lockers, or bundled software the screen lockers. Something interesting happened recently, where legitimate - but hacked - websites would redirect t...

A week in security (Jun 05 – Jun 11)

Last week, we interviewed our very own Pieter Arntz to get to know him a little better. We also touched on the importance of HTTPS and focused on a new social engineering scheme that triggers on mouse movement. We also took a deeper look at LatentBot, a Trojan that is being distributed by the RIG...

[SECURITY] Fedora 25 Update: picocom-2.2-2.fc25

As its name suggests, picocom is a minimal dumb-terminal emulation program. It is, in principle, very much like minicom, only it's "pico" instead of "mini"! It was designed to serve as a simple, manual, modem configuration, testing, and debugging tool. It has also served quite well as a low-tech...

Wallarm Finalist at 2017 Red Herring Top 100 North America

LOS ANGELES — 6.06.2017 — Wallarm has been selected as a finalist for Red Herring’s Top 100 North America award, one of the technology industry’s most prestigious prizes. Finalists for the awards are among the continent’s brightest and most innovative private ventures. Their place among North...

Google: Its Tech Now Blocks 99.9% of Gmail Phishing and Spam Emails

By Jahanzaib Hassan After the effects of the phishing campaign that used Google Docs as a tool to attack, Google has launched a number of upgrades to Gmail and its browser so that users can be notified and warned of suspicious emails and websites that may contain malware. The new machine-learning...

テクニカル サポート詐欺との戦い

本記事は、Microsoft Digital Crimes Unit の Courtney Gregoire による投稿 "The fight against tech support scams" 2017 年 5 月 18 日 米国時間公開 を翻訳したも...

Android Overlay and Accessibility Features Leave Millions at Risk

University researchers are warning that two features, not flaws, core to Google’s Android mobile operating system can be used together to launch clickjacking attacks to gain control of a target’s phone. The discovery was made by researchers at Georgia Institute of Technology, who call the researc...

tech-people.co.uk XSS vulnerability

Vulnerable URL: http://www.tech-people.co.uk/results.php?category=HVAC+%2F+M%26E====="'--!=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11947770 VIP website status:| No...

ecampus.navajotech.edu XSS vulnerability

Open Bug Bounty ID: OBB-235462 Description| Value ---|--- Affected Website:| ecampus.navajotech.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-6051

An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to run a malicious DLL file within the search path resulting in execution of...