Bloatware Insecurity Continues to Haunt Consumer, Business Laptops
High-severity vulnerabilities were found in pre-installed software updaters present in consumer and business laptops from vendors such as Dell, HP, Lenovo, Asus and Acer.
Michael Mimoso
Judge Tosses Evidence Gathered by FBI’s Tor Exploit
A federal judge granted a defense motion in the case of a Vancouver teacher charged with possession of child pornography, excluding evidence gathered by a FBI network investigative technique that exploits an unpatched hole in the Tor browser.
Researcher Pockets $30,000 in Chrome Bounties
Mariusz Mlynski is having a May to remember, earning $30,000 in bounties from Google for vulnerabilities he discovered and disclosed, on top of another $15,500 earlier this month from the same program.
The coalition behind CanaryWatch.org, a database of warrant canaries, has decided to no longer accept new submissions, nor monitor existing canaries for changes.
Embedded serial device servers built by Moxa and used in a number of critical industries remain vulnerable to three serious security issues that have not been patched by the vendor.
Researchers at Kaspersky Lab have identified six APT groups using exploits for a Microsoft Office flaw that was patched in September 2015.
Apple has hired cryptography pioneer Jon Callas for a third time. Callas, who previously at Apple helped design and implement encryption systems for Macs, was most recently at Silent Circle.
The FBI warned its business partners of the risks associated with KeySweeper, a device hidden in a USB wall charger that sniffs keystrokes from Microsoft wireless keyboards.
SWIFT reminds banks of their responsibility in securing their access to the financial network, and creates a centralized information sharing resources for users.
The Angler Exploit Kit is exploiting the latest Flash zero day and is moving Dridex banking malware. The Magnitude and Neutrino exploit kits have also integrated the 0day.
