300,000 Compromised Routers Redirecting Traffic to Attacker Sites
More than 300,000 home and small office routers were compromised in large-scale attacks that altered DNS configurations and redirected traffic to attacker-controlled sites.
Michael Mimoso
Schneider Electric Mitigates Vulnerabilities in OPC Factory Server and Floating License Manager Products
ICS-CERT posted a pair of advisories for Schneider Electric SCADA and industrial control system equipment that could allow an attacker to execute malicious programs.
Apple Updates iOS Security Paper with iCloud, Appsec Insights
Apple updated its iOS Security guide with new information on the encryption and security processes protecting iCloud Keychain, Recovery and Internet services such as iMessage, FaceTime and more.
Automated update services that provide users with security patches and feature enhancements are also a potential hunting ground for intelligence agencies and law enforcement surveillance activity.
FBI Director James B. Comey said during his RSA Conference keynote that public-private sector information sharing is crucial to deterring cybercrime.
The privacy officers of Google, Microsoft and Intel Security discussed at RSA Conference 2014 the ongoing need for greater transparency in reporting government requests for data.
Avaya is expected to patch zero-day vulnerabilities in its latest one-X IP phones. The vulnerabilities and an exploit will be demonstrated this week at RSA Conference 2014.
Microsoft released a technical preview of EMET 5.0 that includes two new exploit mitigations, including Attack Surface Reduction which gives users more control where and when plug-ins are loaded into applications.
RSA executive chairman Art Coviello kicked off RSA Conference 2014 with an explanation of his company’s relationship with the NSA.
Researchers at Bromium Labs are expected to deliver a paper today that explains how they were able to bypass all of the memory protection mitigations in Microsoft’s Enhanced Mitigation Experience Toolkit
