Threatpost

Featured news

Black Hat 2020: Mercedes-Benz E-Series Rife with 19 Bugs

Researchers went into detail about the discovery and disclosure of 19 security flaws they found in Mercedes-Benz vehicles, which have all been fixed.

Black Hat 2020: Satellite Comms Globally Open to $300 Eavesdropping Hack

by Tara Seals

August 6, 2020

Attackers can listen in on internet traffic for high-value targets a continent away, like shipping fleets and oil installations, using some basic home-television gear.

Canon Admits Ransomware Attack in Employee Note, Report

The consumer-electronics giant has suffered partial outages across its U.S. website and internal systems, reportedly thanks to the Maze gang.

High-Severity Cisco DoS Flaw Plagues Small-Business Switches

Cisco recently patched the high-severity flaw, which could allow remote, unauthenticated attackers to launch DoS attacks against its popular small business switches.

Latest news

social influence operations russia china

Black Hat 2020: Influence Campaigns Are a Cybersecurity Problem

by Tom Spring

August 6, 2020

An inside look at how nation-states use social media to influence, confuse and divide — and why cybersecurity researchers should be involved.

Black Hat 2020: ‘Zero-Click’ MacOS Exploit Chain Uses Microsoft Office Macros

by Lindsey O'Donnell

August 6, 2020

At Black Hat 2020, Patrick Wardle disclosed an exploit chain that bypasses Microsoft’s malicious macros protections to infect MacOS users.

Black Hat 2020: Using Botnets to Manipulate Energy Markets for Big Profits

by Tom Spring

August 6, 2020

Black Hat 2020 session discusses how high-wattage connected devices like dishwashers and heating systems can be recruited into botnets and used to manipulate energy markets.

U.S. Offers Reward of $10M for Info Leading to Discovery of Election Meddling

by Elizabeth Montalbano

August 6, 2020

Government hopes to avoid interference in the upcoming November presidential vote with a hefty reward.

Black Hat 2020: Linux Spyware Stack Ties Together 5 Chinese APTs

by Tara Seals

August 5, 2020

The groups, all tied to the Winnti supply-chain specialist gang, were seen using the same Linux rootkit and backdoor combo.

Podcast: Learning to ‘Speak the Language’ of OT Security Teams

Andrew Ginter, VP Industrial Security at Waterfall Security Solutions, talks about the differing priorities between IT and OT security teams as industrial control systems become connected.

Black Hat USA 2020 Preview: Election Security, COVID Disinformation and More

Threatpost editors break down the top themes, speakers and sessions to look out for this year at Black Hat 2020 – from election security to remote work and the pandemic.

Podcast: Security Lessons Learned In Times of Uncertainty

Derek Manky, Chief, Security Insights & Global Threat Alliances at Fortinet’s FortiGuard Labs, discusses the top threats and lessons learned from the first half of 2020.

News Wrap: Twitter Hack, Apple Under Fire and Global Privacy Finger Wags

Threatpost editors talk about the biggest security news stories for the week ended Jul. 24.

Going Down the Spyware Rabbit Hole with SilkBean Mobile Malware

An Android spyware attack was recently discovered that targeted the Uyghur ethnic minority group – since 2013.

A ‘New Age’ of Sophisticated Business Email Compromise is Coming

A new BEC threat group is heralding more sophisticated email scams that target organizations without DMARC and squeeze as much money out of victims as possible.

Podcast: Securing Railway Systems Against Hacks

Dr. Jesus Molina, director of Industrial IOT with Waterfall Security Solutions, discusses the security challenges facing rail networks and systems.

EvilQuest: Inside A ‘New Class’ of Mac Malware

Mac expert Thomas Reed discusses how EvilQuest is ushering in a new class of Mac malware.

AWS Facial Recognition Platform Misidentified Over 100 Politicians As Criminals

Comparitech’s Paul Bischoff found that Amazon’s facial recognition platform misidentified an alarming number of people, and was racially biased.

View all podcasts

A Cyber ‘Vigilante’ is Sabotaging Emotet’s Return

During Black Hat USA 2020, Threatpost talks to Sherrod DeGrippo, with Proofpoint, about Emotet’s recent return -and how a cyber vigilante is attempting to thwart the malware’s comeback.

Black Hat USA 2020: Critical Meetup.com Flaws Reveal Common AppSec Holes

With Black Hat USA 2020 kicking off this week, Erez Yalon with Checkmarx talks about newly disclosed, critical vulnerabilities in Meetup.com – and why they are the “holy grail” for attackers.

Encryption Under ‘Full-Frontal Nuclear Assault’ By U.S. Bills

The U.S. government and tech companies continue to butt heads over the idea of encryption and what that means for law enforcement.

Chris Vickery: AI Will Drive Tomorrow’s Data Breaches

Chris Vickery talks about his craziest data breach discoveries and why “vishing” is the next top threat no one’s ready for.

The Enemy Within: How Insider Threats Are Changing

Insider-threat security experts unravel the new normal during this time of remote working, and explain how to protect sensitive data from this escalating risk.

BEC Gang Exploits G Suite, Long Domain Names in Cyberattacks

BEC gangs like “Exaggerated Lion” are using tricky tactics – like exploiting G Suite – to scam companies out of millions.

Fake Skype, Signal Apps Used to Spread Surveillanceware

Threat groups are increasingly relying on trojanized apps pretending to be legitimate – such as Skype or Signal – but are really spreading surveillanceware.

Tokyo Olympics Postponed, But 5G Security Lessons Shine

Threatpost Senior Editor Tara Seals is joined by Russ Mohr, engineer and Apple evangelist at MobileIron along with Jerry Ray, COO at SecureAge, for a discussion about the now postponed Tokyo Games and its use of 5G and the myriad of security concerns Japan is preparing for.