Clever Gmail Hack Let Attackers Take Over Accounts
Google patched a hole in its Gmail verification system last week that allowed an attacker to hijack a targeted Google Gmail account.
Tom Spring
About
Tom Spring is Editor-in-Chief of Threatpost. For the past two decades he has worked at a number of national publications in the roles of executive editor, technical editor and investigative reporter.
Inside the RIG Exploit Kit
In a deep analysis of RIG, Cisco Talos team outlined the way the exploit kit combines different web technologies such as DoSWF, JavaScript, Flash and VBscript to obfuscate attacks.
Commodity ‘Exaspy’ Spyware Found Targeting High-Level Execs
Researchers warn commodity Android spyware called Exaspy is being used to target high-profile executives.
White hat hackers can hack cars, medical devices and home IoT devices without fear of running amiss of DMCA laws that prevent reverse engineering.
Cisco Systems has issued two critical advisories addressing flaws in its 900 Series Routers and its Cisco Prime Home server.
Wix websites are vulnerable to reflective DOM cross-site scripting attack that could give attackers control of user’s websites.
Vulnerabilities in WeMo home automation devices can be used to attack the Android apps used to manage devices remotely.
Cisco Talos identified the Sundown exploit kit as an up-and-coming contender that may soon rival RIG in terms of size and volume.
Researchers have found a phony Flash Player download for Android that installs banking malware and steals banking credentials.
A variant of the Nymaim dropper has surfaced, and it includes new delivery methods, obfuscation techniques, and the use of PowerShell to download payloads.
