Guilty of your roots: Why Kaspersky believes tech nationalism is on our doorstep

The answer lies in why Kaspersky has now moved core systems from Russia to Switzerland.

Researchers discover seven new Meltdown and Spectre attacks

Experiments showed that processors from AMD, ARM, and Intel are affected.

Boston Accent - Application Security Weekly #39

This week, Keith and Paul interview Brian Kelly, Head of Conjur Engineering at CyberArk! Brian focuses on creating products that add much-needed security and identity management to the landscape of DevOps tools and cloud systems. In the Application Security News, DJI Drone Vulnerability, Hackers are increasingly destroying logs to hide attacks, Adobe ColdFusion servers under attack from APT group, understanding Open Source Code use in your business, and more!

 

Full Show Notes: https://wiki.securityweekly.com/ASW_Episode39

To learn more about Conjur, go to: www.conjur.org/asw

 

Visit https://www.securityweekly.com/asw for all the latest episodes!

Visit https://www.activecountermeasures/asw to sign up for a demo or buy our AI Hunter!

Visit our website: https://www.securityweekly.com

 

Follow us on Twitter: https://www.twitter.com/securityweekly

Like us on Facebook: https://www.facebook.com/secweekly

Card skimming malware removed from Infowars online store

Infowars online store hit by brief Magecart incident that lasted around 24 hours. Less than 1,600 users may have been affected.

Microsoft patches Windows zero-day used by multiple cyber-espionage groups

Kaspersky: Windows zero-day exploited by multiple cyber-espionage groups.

Hack Naked News #196 - November 13, 2018

Vulnerabilities in SSD Encryption, Bypassing Windows UAC, Botnet Pwns over 100,00 routers w/ ancient security flaw, Google hit with IP Hijack, and 1 thing you can do to make your internet safer and faster! Jason Wood from Paladin Security joins us for expert commentary to discuss how Phineas Fisher got away with hacking Team Hacker!

 

Full Show Notes: https://wiki.securityweekly.com/HNNEpisode196

Visit https://www.securityweekly.com/hnn for all the latest episodes!

Visit https://www.activecountermeasures/hnn to sign up for a demo or buy our AI Hunter!

 

Follow us on Twitter: https://www.twitter.com/securityweekly

Like us on Facebook: https://www.facebook.com/secweekly

Facebook patches another bug that could have allowed mass-harvesting of user data

Imperva security researcher publicly discloses bug today, but Facebook patched the issue back in May.

Crawl to the Office - Business Security Weekly #106

This week, Matt and Paul interview Dario Forte, Chief Executive Officer and Founder of DFLabs! Dario explains his journey to the position he is in now, DFLabs recent press release about Open Integration Framework, and what it allows people to do when it comes to the DFLabs platform addressing SOAR! In the Article Discussion, Matt and Paul talk the key to better focus and higher productivity, living your life on purpose, why people are willing to do more meaningful work for less money, the fundamentals of leadership, and more on this episode of Business Security Weekly!

 

Full Show Notes: https://wiki.securityweekly.com/BSWEpisode106

Check out Sponsor's website: www.dflabs.com/securityweekly

Visit https://www.securityweekly.com/bsw for all the latest episodes!

Visit https://www.activecountermeasures/bsw to sign up for a demo or buy our AI Hunter!!

 

Visit our website: https://www.securityweekly.com

Follow us on Twitter: https://www.twitter.com/securityweekly

Like us on Facebook: https://www.facebook.com/secweekly

Google traffic hijacked via tiny Nigerian ISP

A large chunk of the hijacked traffic passed through the network of a controversial Chinese state-owned telecom provider that was previously accused of intentionally misdirecting internet traffic.

How Magecart groups are stealing your card details from online stores

New report sheds light on Magecart groups and their respective tactics.

Google launches VisBug, a Chrome extension for point-and-click web design

Google's new VisBug extension lets you make small tweaks to website's text and images.

US, Russia, China don't sign Macron's cyber pact

New cyber peace pact signed by 51 other countries, 224 companies, and 92 non-profits and advocacy groups.

Internet Explorer scripting engine becomes North Korean APT's favorite target in 2018

North Korean hacking group focuses attacks on aging and soon-to-be-deprecated technology.

HTTP-over-QUIC to be renamed HTTP/3

IETF agrees to base the next major iteration of HTTP on Google's QUIC protocol

Cloudflare launches Android and iOS apps for its 1.1.1.1 service

Company makes it easy for mobile users to hide their DNS traffic from nosy ISPs.

A Million Voices - Paul's Security Weekly #582

This week, we welcome Corin Imai, Senior Security Advisor for DomainTools! She joins Paul and the crew to talk about DNS, phishing tools, and tease what DomainTools has in store for 2019! In our Technical Segment, we welcome back Eyal Neemany, Senior Security Researcher at Javelin Networks to talk about securing remote administration, remote credentials, why Jump Servers aren’t as good, and he shows that you have to connect to remote machines using AD! In the Security News, Cisco accidentally released Dirty Cow exploit code, Apache Struts Vulnerabilities, Zero Day exploit published for VM Escape flaw, Spam spewing IoT botnet infects 100,000 routers, some of these vibrating apps turn your phone into a sex toy, and more on this episode of Paul's Security Weekly!

 

Full Show Notes: https://wiki.securityweekly.com/Episode582

Visit https://www.securityweekly.com/psw for all the latest episodes!

Visit https://www.activecountermeasures/psw to sign up for a demo or buy our AI Hunter!

 

Follow us on Twitter: https://www.twitter.com/securityweekly

Like us on Facebook: https://www.facebook.com/secweekly 

Deserialization issues also affect Ruby, not just Java, PHP, and .NET

Java, .NET, PHP, and now Ruby. Python, are you next?

Zero-day in popular WordPress plugin exploited in the wild to take over sites

Attacks started around three weeks ago and are still going on. Users should update the WP GDPR Compliance plugin to version 1.4.3 to protect their sites.

Linux cryptocurrency miners are installing rootkits to hide themselves

Rootkit component hides the crypto-mining process that causes high CPU usage from local, built-in Linux process monitoring utilities.

Threat Stack acquires Bluefyre in cloud infrastructure security push

The company will use Bluefyre's portfolio to assist developers in building secure cloud-native applications.

ForeScout Technologies snaps up SecurityMatters in $113 million deal

The deal is designed to strengthen ForeScout's enterprise and industrial security offerings.

South Korea will make young cryptojackers stand trial for infecting PCs

It is believed this is the first time the country has had to deal with the emerging problem of cryptojacking.

Adobe ColdFusion servers under attack from APT group

A cyber-espionage group appears to have reverse engineered an Adobe security patch and is currently going after unpatched ColdFusion servers.

Chrome 71 will warn users about websites with shady phone subscription forms

Google plans to show full-page warning for sites that fail to list all mobile subscription information in a proper and clearly visible manner.

Google: Newer Android versions are less affected by malware

Android devices that only download apps from Google Play are 9 times less likely to get malware than devices that download apps from other sources.

Steam bug could have given you access to all the CD keys of any game

Bug affected a Steam API and was patched in August. Downgrading your Steam client won't help you get free games.

DerpTrolling game server DoS attacker pleads guilty

The man has pleaded guilty to attacks against companies including Sony.

Canada Post leaked personal data, orders of thousands of cannabis smokers

The rollout of legal weed in Ontario is now beset by potential privacy issues.

Locked Up - Enterprise Security Weekly #114

This week, Paul and Matt Alderman interview Harry Sverdlove, Chief Technology Officer at Edgewise to talk about Zero Trust Segmentation! In the Enterprise News this week, Symantec boosts security with Javelin Networks, ThreatQuotient integrates Verified Breach Intelligence from Visa, FireMon delivers hybrid cloud security with new visibility and orchestration, StackPath partners with Sectigo, and we have some acquisition & funding updates from Veracode, Shape Security, Thoma Bravo, and more!

 

Full Show Notes: https://wiki.securityweekly.com/ES_Episode114

Visit https://www.securityweekly.com/esw for all the latest episodes!

Visit https://www.activecountermeasures/esw to sign up for a demo or buy our AI Hunter!

 

Follow us on Twitter: https://www.twitter.com/securityweekly

Like us on Facebook: https://www.facebook.com/secweekly

Cambodia's ISPs hit by some of the biggest DDoS attacks in the country's history

EZECOM, SINET, Telcotech, and Digi confirmed to have been affected.

US Cyber Command starts uploading foreign APT malware to VirusTotal

USCYBERCOM said it plans to regularly upload "unclassified malware samples" to VirusTotal.

Cisco removed its seventh backdoor account this year, and that's a good thing

Seventh backdoor account discovered in Cisco Small Business Switches firmware.

Dutch police snoop on criminal chats by intercepting encryption server

Law enforcement says they were able to read over 250,000 messages.

IoT botnet infects 100,000 routers to send Hotmail, Outlook, and Yahoo spam

Botnet infects routers and uses them to relay connections to webmail services.

University shuts down network to thwart Bitcoin cryptojacking scheme

The network and the university's power were used covertly to mine for cryptocurrency.

WordPress, WooCommerce flaws combine to allow website hijacking

A problem in how WordPress handles privileges can be exploited to take control of domains.

This is how artificial intelligence will become weaponized in future cyberattacks

Real-time, autonomous decisions are only some of the techniques AI can bring to the table.

Ultimate Nirvana - Application Security Weekly #38

This week, Keith and Paul interview Daniel Cuthbert, Global Head of Security Research for Banco Santander! In the Application Security News, a nasty DHCPv6 packet can Pwn vulnerable Linux Boxes, 'Stalkerware' website let anyone intercept texts of tens of thousands of people, twelve malicious Python libraries found and removed from PyPI, the U.S. Department of Defense Guide for "Detecting Agile BS", and more!

 

Full Show Notes: https://wiki.securityweekly.com/ASW_Episode38

Visit https://www.securityweekly.com/asw for all the latest episodes!

Visit https://www.activecountermeasures/asw to sign up for a demo or buy our AI Hunter!

 

Visit our website: https://www.securityweekly.com

Follow us on Twitter: https://www.twitter.com/securityweekly

Like us on Facebook: https://www.facebook.com/secweekly

Microsoft, Google apps feature in the top 20 vulnerabilities in enterprise environments

The most severe web browser bugs have the potential to disrupt up a third of enterprise environments.

VirtualBox zero-day published by disgruntled researcher

Russian researcher publishes detailed write-up for VirtualBox zero-day on GitHub after Oracle took 15 months to fix a previous similar issue.

Google's automated fuzz bot has found over 9,000 bugs in the past two years

Google improves OSS-Fuzz service, plans to invite new open source projects to join.

Hackers breach StatCounter to hijack Bitcoin transactions on Gate.io exchange

StatCounter has fixed the issue and Gate.io has removed the script from its site.

HSBC discloses security incident

Bank appears to have fallen victim to credential stuffing attack.

Ahead of US midterms, Facebook removes 30 accounts and 85 Instagram profiles

Facebook says it acted after a tip it received on Sunday from US law enforcement.

BGP attacks hijack Telegram traffic in Iran

With so many users in Iran, it's unsurprising that potentially state-sponsored groups would want an access point into the banned app.

Evernote for Windows patch resolves stored XSS vulnerability

The severe flaw permitted attackers to create a persistent XSS issue.

Cookin' Some Stuff Up - Business Security Weekly #105

This week, Paul and Matt interview CISO Alex Wood! He joins us to talk about the business mind set, how to be an effective CISO, and the vulnerabilities in the business that you have to watch out for! In the Article Discussion on Leadership, Communication, and Innovation, Matt and Paul talk how getting fired can be good for your career, a powerful planning routine that puts you in control, how to get better with sales execution, why you need a theme, not goals, and more on this episode of Business Security Weekly!

 

Full Show Notes: https://wiki.securityweekly.com/BSWEpisode105

Visit https://www.securityweekly.com/bsw for all the latest episodes!

Visit https://www.activecountermeasures/bsw to sign up for a demo or buy our AI Hunter!!

 

Visit our website: https://www.securityweekly.com

Follow us on Twitter: https://www.twitter.com/securityweekly

Like us on Facebook: https://www.facebook.com/secweekly

Back Together - Business Security Weekly #101

This week, Michael and Paul interview Jason Albuquerque, CISO at Carousel Industries! Jason explains how to run your security team as in a 'fish bowl', and how to apply this technique to your clients and their business! In our second segment, they discuss how to develop empathy for someone who annoys you, separating the quality of the outcome and quality of the decision, and much more!

 

Full Show Notes: https://wiki.securityweekly.com/BSWEpisode101

Visit https://www.securityweekly.com/bsw for all the latest episodes!

Visit https://www.activecountermeasures/bsw to sign up for a demo or buy our AI Hunter!!

 

Visit our website: https://www.securityweekly.com

Follow us on Twitter: https://www.twitter.com/securityweekly

Like us on Facebook: https://www.facebook.com/secweekly

Oracle confirms China Telecom internet traffic 'misdirections'

Oracle's Internet Intelligence division partially confirms controversial US Naval War College research paper.

States activate National Guard cyber units for US midterm elections

National Guard cyber units activated in Washington, Illinois, and, more recently, Wisconsin.

Google Chrome 71 will continue crackdown on sites with abusive ads

Google says previous ad blocking protections only blocked half of the abusive sites it wanted to block.

Flaws in self-encrypting SSDs let attackers bypass disk encryption

Master passwords and faulty standards implementations allow attackers access to encrypted data without needing to know the user-chosen password.

Microsoft working on porting Sysinternals to Linux

Microsoft engineers have already ported the ProcDump utility and are currently working on porting ProcMon as well. More tools to follow.

Republican rival puts Georgia's Democratic Party under investigation for 'cyber crimes'

Hacking claims don't seem to hold water when considering the state's previous accusations.

Android news and kids apps contain the most third-party trackers

Over 20 child advocacy groups have sent a letter to the FTC regarding advertising in kids apps.

Buckle Up! - Paul's Security Weekly #581

This week, we welcome Aleksei Tiurin, Senior Security Researcher at Acunteix for a Technical Segment on Insecure Deserialization in Java/JVM! In our second Technical Segment, we welcome Matt Toussain, Security Analyst at Black Hills Information Security to talk about RAS! In the security news, Bleedingbit Vulnerabilities, Cisco Zero-Day exploited in the wild, Researchers find Flaws in chips used in hospitals, US Governments network infected with Russian Malware, and the Weird Trick that turns your Google Home Hub into a Doorstep!

 

Full Show Notes: https://wiki.securityweekly.com/Episode581

Visit https://www.securityweekly.com/psw for all the latest episodes!

 

→Visit https://www.activecountermeasures/psw to sign up for a demo or buy our AI Hunter!!

→Follow us on Twitter: https://www.twitter.com/securityweekly

→Like us on Facebook: https://www.facebook.com/secweekly

Two botnets are fighting over control of thousands of unsecured Android devices

Researchers spot Trinity and Fbot botnets trying to infect Android devices via the ADB interface.

Hackers are increasingly destroying logs to hide attacks

According to a new report, 72 percent of incident response specialists have came across hacks where attackers have destroyed logs to hide their tracks.

Intel CPUs impacted by new PortSmash side-channel vulnerability

Vulnerability confirmed on Skylake and Kaby Lake CPU series. Researchers suspect AMD processors are also impacted.

Magecart claims fresh victim in electronics kit seller Kitronik

Kitronik says a recent data breach is the work of the same group which hacked British Airways and Newegg.