A team of researchers from Ruhr-Universität Bochum in Germany has analyzed 20 printers and multifunction printers (MFPs) from several vendors and discovered that each of them is affected by at least one vulnerability, including flaws that can be exploited to crash the device or obtain sensitive information that provides access to the organization’s network.
read more
Keylogger, Bitcoin Stealer Dropped via Fake Bank Transfer Emails
A recently detected spam campaign uses phony bank transfer emails to distribute a piece of malware that can steal information stored in browsers, log keystrokes and steal Bitcoin from crypto-currency wallets.
read more
Netflix Login Generator Distributes Ransomware
A newly observed piece of ransomware is being distributed via a Netflix login generator, Trend Micro security researchers warn.
read more
Many NETGEAR Routers Leak Admin Passwords
NETGEAR has released firmware updates for many of its routers after an expert discovered that they are affected by serious vulnerabilities that can be exploited to obtain the administrator password for the user interface.
read more
It’s Time to Implement SOC 2.0
To Make the Most of your SOC and to Truly Minimize Cyber Risk, it Requires All Hands on Deck—Making Security Everybody’s Business.
read more
IBM Patches XSS Flaws in InfoSphere BigInsights
IBM has released patches for two cross-site scripting (XSS) vulnerabilities affecting the company’s InfoSphere BigInsights analytics platform.
read more
Sophisticated Documents Used to Attack NATO Governments
A threat actor has used sophisticated Word documents to deliver Flash exploits in attacks aimed at NATO governments, reported Cisco’s Talos security intelligence and research group.
read more
Fears Grow over Jihadist Cyber Threat
Lille, France – Jihadists have yet to shut down a power grid, paralyze a transport network or banking system or take over a key industrial site from afar, but experts say the threat of such a cyber attack should be taken seriously.
read more
Google Launches Its Own Root Certificate Authority
Google announced on Thursday the expansion of its certificate authority (CA) efforts with the launch of a root CA that will allow the company to independently handle its certificate needs.
read more
Dridex Trojan Uses New Tactic to Bypass User Account Control
A recently observed Dridex distribution campaign is leveraging a new UAC (User Account Control) bypass method, Flashpoint security researchers warn.
read more
