Chinese Hackers Compromised Forbes.com Using IE, Flash Zero Days
A Chinese APT group has been linked to a watering hole attack on Forbes.com used to target defense and financial targets.
Chris Brook
About
"Distrust and caution are the parents of security" - Benjamin Franklin
PlugX, Go-To Malware for Targeted Attacks, More Prominent Than Ever
The popular remote access tool PlugX enjoyed an ascent in popularity in 2014 and is now a go-to malware for attack groups.
Following Exploits, Zero Day in WordPress Plugin FancyBox Patched
Developers have patched a zero day vulnerability in FancyBox, a plug-in for WordPress, which allowed malware to be added, via an iFrame, to infected sites.
Microsoft is aware of a recently disclosed bug in its latest browser, Internet Explorer 11, and is actively developing a patch for the issue.
A relatively new Android Trojan that specializes in stealing banking information by intercepting SMS messages has been making the rounds.
Using a new proof-of-concept, local and public IP addresses can be extracted from candidate messages sent by the API Directory’s STUN protocol requests .
Long thought dead, the peer-to-peer (P2P) ZeroAccess botnet has resurfaced and as of just a few weeks ago, has returned to propagating click-fraud scams.
FreeBSD has patched a handful of vulnerabilities in its kernel code that could have enabled an attacker to crash the system, execute arbitrary code, or disclose sensitive kernel memory.
In addition to patching the three Project Zero vulnerabilities disclosed last week, Apple is apparently readying a fix for the Thunderstrike boot attack as well, something that will purportedly rid all Macs running Yosemite of the issue.
Siemens has patched a web vulnerability in its SIMATIC PLC family of products that could have led unsuspecting users to malicious sites
