Dan Geer: Security at the Forefront of Policy Decisions
Dan Geer’s Black Hat 2014 keynote featured 10 proposals to address shortcomings in security, in the context of government surveillance and eroding privacy.
Michael Mimoso
Call Center Phone Fraud for Fun and Profit at Black Hat
Researchers will discuss a study into the effectiveness of telephone fraud against enterprise call centers, and how these attacks are sometimes combine with hacks or malware attacks.
Samba Patches Heap Overflow Bug in Current Versions
A remote code execution vulnerability has been patched in Samba, open source software that enables file and print server interoperability for Windows clients with Linux and UNIX servers.
Mozilla Developer Network members are advised to change their passwords after an accidental password dump to a public server was discovered.
A new variant of the Citadel banking Trojan has been discovered where the attackers are using Windows remote shell commands to be enable Remote Desktop Protocol access, even if the malware is discovered and removed.
Microsoft announced that the latest version of its Enhanced Mitigation Experience Toolkit, EMET 5.0, was released to general availability today.
A new variant of the GameOver Zeus malware has been spotted with a new domain generation algorithm that now generates 1,000 new domains daily.
A talk at Black Hat will expose security weaknesses introduced by multipath TCP, extensions to TCP that bring resilience and efficiency to networking.
Tor is warning users of its hidden services to upgrade relays after attackers were discovered on the network trying to deanonymize users.
Open WhisperSystems today released Signal, a free app that brings encrypted calling to the iPhone.
