Facebook Bug Bounty Submissions Climb in 2014
Facebook released final numbers on 2014 submissions and payouts from its bug bounty program, showing continued growth in both areas.
Michael Mimoso
Ramnit Botnet Shut Down
Europol and several private technology companies announced the overnight takedown of the command and control infrastructure supporting the Ramnit botnet.
Attacks Against Critical Infrastructure Seek Operational Intelligence
Advanced attacks against industrial control systems are intelligence gathering operations in order to learn the inner workings of ICS infrastructure to facilitate sabotage.
Software called PrivDog has been unearthed with a similar Superfish-type vulnerability that breaks SSL connections.
Komodia.com, home of the SSL module at the heart of the Superfish scandal, is offline because of a DDoS attack.
Researcher Rob Graham has cracked the certificate password for Superfish adware pre-installed on Lenovo laptops.
The organizers of the TrueCrypt audit expect the cryptanalysis of the open source encryption software to begin shortly; phase two will be handled by NCC Group’s Cryptography Services practice.
BadUSB-style attacks against industrial control systems are theoretically possible, but bear watching according to Michael Toecker today at the Security Analyst Summit.
The Desert Falcons gang is the first Arabic APT group, according to researchers at Kaspersky Lab.
The persistence module used by the Equation APT Group uncovered by researchers at Kaspersky Lab has been called the ultimate cyberattack tool.
