WPAD Flaws Leak HTTPS URLs
Sniffing HTTPS URLs with malicious PAC files gets easier with a new technique that exploits flaws in the Web Proxy AutoDiscovery protocol.
Hacks
New Trojan SpyNote Installs Backdoor on Android Devices
A new SpyNote Trojan can give bad guys control over your phone from the camera, microphone to eavesdropping on phone calls.
White House Beefs Up Cyber Threat Response Action Plan
A new White House directive outlines the U.S. cyber threat response strategy along with issuing a color-coded cyber threat schema.
Donald Trump may have left himself an out today when he urged Russian hackers to find 30,000 emails deleted by Hillary Clinton from her private server.
Kaspersky Lab researchers participated in a Reddit AMA, touching on topics such as attack attribution, critical infrastructure security, attacker and researcher tradecraft, and the shortage of security talent.
Kimpton Hotels & Restaurants, a nationwide chain of 62 boutique hotels, is investigating a string of unauthorized charges on payment cards used at a number of its locations.
Security firms and law enforcement launch No More Ransom, a web-based effort dedicated to ransomware awareness and decryption tools.
Launching a BypassUAC attack just got a bit easier with a new Windows User Account Control bypass technique that can fly under the radar of security solutions that monitor for this type of circumvention.
Researchers at Northeastern University next week at DEF CON are expected to present a paper describing their framework for discovering Tor hidden services directories that snoop on hidden services.
Researchers found a serious vulnerability in PHP code that could have allowed hackers to gain access to porn site’s private user data.
