Joomla Joins WordPress As TeslaCrypt Ransomware Target

Exploit kits infecting thousands of WordPress websites are setting their sights on the open-source content management system Joomla in a new campaign spotted by a researcher at the SANS Institute’s Internet Storm Center. “The group behind the WordPress ‘admedia’ campaign is now apparently targeti...

On the iPhone Encryption Debacle, the glibc Linux Vulnerability, and More

Mike Mimoso and Chris Brook discuss the week in news, including the iPhone encryption debacle, the glibc Linux vulnerability, and the latest ransomware headlines. Download: ThreatpostNewsWrapFebruary192016.mp3 Music by Chris Gonsalves...

Katie Moussouris on the Latest Wassenaar Arrangement Rules

Threatpost editor Mike Mimoso talks to HackerOne chief policy officer Katie Moussouris about the U.S. implementation of the Wassenaar Arrangement rules and where things stand close to seven months after the initial draft was pulled off the table for a rewrite...

Chinese Mobile Ad Library Backdoored to Spy on iOS Devices

Versions of a popular Chinese mobile ad library have been backdoored with capabilities that can be used to surreptitiously record audio and steal data stored on thousands of iOS devices. Researchers at FireEye said today they have found 17 backdoored versions of the mobiSage SDK versions 5.3.3 to...

Microsoft Revokes Leaked D-Link Certificates

Microsoft today revoked trust for the four digital certificates inadvertently leaked last week by networking gear manufacturer D-Link. Microsoft said it has modified its Certificate Trust List removing trust for the four certs, which could have been used to sign malicious code used in attacks. Th...

Dennis Fisher On Security, Journalism, and the Origins of Threatpost

Ryan Naraine hijacks the podcast to talk with Dennis Fisher about the origins of Threatpost, his time as a security reporter, the changes in the industry, and what’s next on the horizon.​ Download: lastdigitalundergroundever.mp3 Music by Chris Gonsalves...

Encryption, Lock Mechanism Vulnerabilities Plague Lock App AppLock

Multiple weaknesses exist in AppLock, a popular lock application for Android devices that boasts more than 100 million users. A researcher is claiming that the app, which is supposed to securely store photos, videos and other apps, doesn’t really use encryption to do so, it simply hides the files...

Brian Donohue on Security and Journalism

Dennis Fisher talks with Brian Donohue about his time at Threatpost, learning about security and the joy and pain of being a journalist. Download: digitalunderground205.mp3 Music by Chris Gonsalves...

Google App Engine Java Vulnerabilities Disclosed

A Polish research group claims there are still several outstanding vulnerabilities in Google App Engines for Java, including three complete Java sandbox escapes. After three weeks of radio silence from Google, it decided to disclose on Friday the vulnerabilities, along with proof of concept code...

Dennis Fisher and Mike Mimoso Discuss the MySQL bug, OpenSSL and the House Crypto Hearing

Dennis Fisher and Mike Mimoso discuss the post-RSA news, including the MySQL bug, the progress of the OpenSSL overhaul and the wildly entertaining House hearing on crypto backdoors. Download: digitalunderground200.mp3 Music by Chris Gonsalves...

A Year Later, XSS Vulnerability Still Exists in eBay

A potentially dangerous cross-site scripting XSS vulnerability has existed in eBay for more than a year, and it doesn’t appear the company is a rush to fix the issue. Jaanus Kääp, a researcher based in Estonia, discovered the issue more than a year ago when he was looking into the security of web...

PODCAST: News from RSA 2015

Dennis Fisher, Mike Mimoso and Brian Donohue discuss the news of the week from the RSA Conference. Download: digitalunderground198.mp3 Music by Chris Gonsalves Flickr photo via @jf10...

Google Awards $5k Bounty for Youtube Video Delete Bug

Student and security researcher Kamil Hismatullin recently took Google up on its vulnerability research grant offer, accepting a $1337 cash advance in exchange for a promise to seek out cross-site scripting and cross-site request forgery bugs in YouTube’s Creator Studio. While conducting that...

Google Apps 'Defect' Leaks Private WHOIS Data Of 280,000

Google has notified hundreds of thousands of domain registrants that their private WHOIS information has been exposed in the clear, opening them up to identity theft, phishing scams and more. Researchers from Cisco Talos last night said the problem likely lies with one of Google’s registrar...

Ryan Naraine on SAS 2015

Dennis Fisher talks with Ryan Naraine, the long lost co-founder of Threatpost, about the upcoming Kaspersky Security Analyst Summit in Cancun and how much the conference has grown in the last few years. Music by Chris Gonsalves Download: digitalunderground184.mp3...

Podcast Discussing WordPress Security, Anti-Surveillance

Dennis Fisher and Mike Mimoso talk about the news from the past week, including the out-of-band Microsoft patch, the compromised Joomla and WordPress plug-in attack campaign and the Detekt anti-surveillance tool.​ Download: digitalunderground172.mp3 Music by Chris Gonsalves...

Data Breach Exposes Customer Payment Card Information

Grocery giants Albertsons and SUPERVALU announced yesterday that a data breach may have exposed the credit and debit card information of an unknown number of its customers at various grocery store locations in more than 18 states. Behind Kroger’s, Albertsons is the second largest grocery store...

Podcast: Threatpost Previews Black Hat 2014

In this special edition of the Digital Underground Podcast, Dennis Fisher interviews fellow Threatpost editor Mike Mimoso and also Threatpost reporter Brian Donohue about the Black Hat security conference, which begins this week in Las Vegas. Topics of discussion include Chris Valasek and Charlie...

FireEye Uncovers Android Remote Access Malware

UPDATE: A previous version of this story incorrectly stated that the malware disables any antivirus application. In reality, the malware only uninstalls a particular antivirus application,“com.ahnlab.v3mobileplus,” that is often bundled with certain banking applications. A new remote access tool...

Threatpost News Wrap, June 23, 2014

Dennis Fisher and Mike Mimoso discuss the latest security news, including the possible fork of TrueCrypt, Microsoft’s new information sharing platform, the FBI’s cybercrime task force and the US team’s crushing tie with Portugal. Download: digitalunderground156.mp3 Music by Chris Gonsalves...