Docker recently resolved a runc privilege escalation vulnerability that could be exploited by a malicious program to escape container and access the host.
read more
Suspected Russian Hacker Wanted by U.S. Jailed in Spain
An alleged Russian hacker wanted for fraud has been detained in Spain and jailed pending extradition to the United States, police and a court spokesman said Thursday.
read more
Ransack Campaigns Target Hadoop and CouchDB
Following a series of ransom attacks against MongoDB and Elasticsearch databases in recent weeks, many users of CouchDB and Hadoop are now finding their databases are under attack as well.
read more
DHS Publishes National Cyber Incident Response Plan
The U.S. Department of Homeland Security has published the National Cyber Incident Response Plan (NCIRP), which aims to describe the government’s approach in dealing with cyber incidents involving public or private sector entities.
read more
Ukraine Power Company Confirms Hackers Caused Outage
The investigation is ongoing, but Ukraine’s national power company Ukrenergo has confirmed that the recent electricity outage in the Kiev region was caused by a cyberattack.
read more
ProtonMail Launches Tor Hidden Service
Encrypted email provider ProtonMail announced this week the launch of a Tor hidden service whose role is to help combat the censorship and surveillance efforts of totalitarian governments.
read more
XSS Found in Silently Installed Acrobat Chrome Extension
Google Project Zero researcher Tavis Ormandy discovered that a Chrome extension installed silently by Adobe last week had been affected by a cross-site scripting (XSS) vulnerability. Adobe quickly patched the flaw after learning of its existence.
read more
New “Quimitchin” Mac Malware Emerges Targeting Scientific Research
Security researchers have described what they consider to be "the first Mac malware of 2017." It has a simple structure and includes some antiquated code; but nevertheless appears to have existed undetected for some time — perhaps even several years — while possibly targeting biomedical research institutions.
read more
Chrome Users Targeted in Malware Campaign
A recently observed malware distribution campaign has been specifically devised to target users of the Chrome browser on Windows-based computers, Proofpoint security researchers warn.
read more
Hackers Offered Over $1 Million at Pwn2Own 2017
For the 10th anniversary of the Pwn2Own hacking contest, Trend Micro and the Zero Day Initiative (ZDI) have introduced new exploit categories and they are prepared to offer more than $1 million worth of prizes.
read more
