3299 matches found
DEF CON and Feds Partner on Anonymous Bug Submission Program
Hacking conference organizer DEF CON Communications said it plans to roll out a global anonymous bug submission platform based on the SecureDrop communications tool. During a session at DEF CON in Las Vegas last week, conference founder Jeff Moss said the goal was to launch the yet-to-be-named...
Trump’s Intel Vacancies Put Americans in Danger
Sue Gordon's departure is the latest sign that US national security might be stretching its leaders too thin—and risks putting the wrong people into roles that American lives depend upon...
A week in security (July 22 – 28)
Last week on Malwarebytes Labs, we offered an extensive analysis into the Malaysian Airlines Flight 17 investigation, updated users on the newest feature set to AdwCleaner 7.4.0 it now detects pre-installed software, and provided a deep dive into Phobos ransomware. We also broke down the latest...
WannaCry hero Marcus Hutchin aka MalwareTech won’t serve prison time
By Uzair Amir The British cyber security researcher and WannaCry ransomware hero Marcus Hutchin was initially facing up to 10 years in a US prison. This is a post from HackRead.com Read the original post: WannaCry hero Marcus Hutchin aka MalwareTech won't serve prison time...
Before Mueller’s Testimony, Dems Demand More Election Security
Senate Democrats want to remind everyone that US elections are still at risk, and Congress could do more to protect them...
The Marines’ New Drone-Killer Aces Its First Test in Iran
Last week’s US strike of an Iranian drone is the first reported successful use of the Marines’ new energy weapon...
Stored Cross-site Scripting Vulnerability in the Us***.cl***.php File in the Frontend of the Feifei Movie and TV Navigation System
FeiFei Film and TV Navigation System FeiFeiCms is a free and open source PHP movie program. A stored cross-site scripting vulnerability exists in the Us.cl.php file in the frontend of FeiFeiCms. Attackers can insert malicious js code in the page to obtain user cookies and other information,...
US Journalist Detained When Returning to US
Pretty horrible story of a US journalist who had his computer and phone searched at the border when returning to the US from Mexico. After I gave him the password to my iPhone, Moncivias spent three hours reviewing hundreds of photos and videos and emails and calls and texts, including encrypted...
Cellular networks worldwide hit by hackers in espionage attempt
By Uzair Amir Cybereason, an Israeli-US security firm based in Boston, has reported that certain nation-state hackers managed to compromise the systems of no less than ten cellular carriers across the globe to steal metadata of specific users. Without naming anyone, the company claims that the...
Election Security
Stanford University's Cyber Policy Center has published a long report on the security of US elections. Summary: it's not good...
Iran Shoots Down a US Drone, Apple Recalls MacBook Batteries, and More News
Catch up on the most important news from today in two minutes or less...
Iranian Hackers Launch a New US-Targeted Campaign as Tensions Mount
Three cybersecurity firms have identified phishing attacks stemming from Iran—that may lay the groundwork for something more destructive...
US to Russia on Nuke Experiments: Do as We Say, Not as We Do
The US is quietly ramping up its plutonium experiments even as Washington raises concerns about Russian testing...
Cross-Site Scripting
Overview Versions of keystone prior to 4.0.0 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize user input on the Contact Us page, allowing attackers to submit contact forms with malicious JavaScript in the message field. The output is not properly encoded leading an admin...
Hackers Target US Power, Amazon Clones a Neighborhood, and More News
Catch up on the most important news from today in two minutes or less...
The Highly Dangerous 'Triton' Hackers Have Probed the US Grid
The same hackers behind a potentially lethal 2017 oil refinery cyberattack are now sniffing at US electrical utility targets...
Border Patrol data breach: Footages of tourists entering/exiting the US compromised
By Waqas The data breach took place after a database used by Border Patrol was hit by a "malicious cyber-attack." The officials from US Customs and Border Protection CBP have revealed that one of their subcontractors have been targeted with a “malicious” cyber attack due to which the pictures of...
IoT Security Regulation is on the Horizon
LONDON, UK – Internet of things IoT device security continues to worry the tech industry – however, experts believe that the right type of global regulation could be key for ensuring security standards. The question is when those regulatory efforts will be fleshed out. Ken Munro, with Pen Test...
Chinese Military Wants to Develop Custom OS
Citing security concerns, the Chinese military wants to replace Windows with its own custom operating system: Thanks to the Snowden, Shadow Brokers, and Vault7 leaks, Beijing officials are well aware of the US' hefty arsenal of hacking tools, available for anything from smart TVs to Linux servers...
News Wrap: Which Companies Are Doing Privacy Right and Which Aren't?
The Threatpost team breaks down the top data privacy-related news this week, including: Google’s acknowledgement that G Suite passwords had been stored in plaintext – since 2005. The database of golfing app Game Golf left misconfigured, exposing millions of data points on games played plus...