Telcos Singled Out for Prioritizing Government Requests for Data Over Privacy
The EFF’s annual Who Has Your Back report singles out giant telecommunications providers for their prioritization of government requests for data over privacy.
Michael Mimoso
Google to Fully Distrust WoSign/StartCom SSL Certs in Chrome 61
Google has put websites signed with WoSign/StartCom SSL certificates on notice that it will no longer trust certs from the Chinese CA starting in Chrome 61.
‘Little Hope’ to Recover Data Lost to Petya Ransomware
Researchers at Kaspersky Lab have discovered an error in the ExPetr ransomware code that prevents recovery of lost data.
Microsoft has made a definitive link between MEDoc and initial distribution of the Petya ransomware. Kaspersky Lab, meanwhile, has identified a Ukrainian government website used in a watering hole attack.
Today’s global ransomware attack is spreading via EternalBlue and through local networks using PSEXEC and WMIC.
Biscom recently patched a stored cross-site scripting vulnerability in its secure file transfer product.
Google Project Zero’s Tavis Ormandy found another remote code execution vulnerability in the Microsoft Malware Protection Engine, the third since early May.
The FBI’s Internet Crime Complaint Center (IC3) identified ransomware as one of 2016’s top threats, but a relatively small number of attacks were reported.
Check Point has toned down its initial estimates on the number of Fireball malware infections from 250 million machines and 20 percent of corporate networks to 40 million computers.
Researchers at CyberArk have developed a bypass for Windows PatchGuard that leverages Intel’s Processor Trace (Intel PT) technology to execute code at the kernel.
