DNS-based DDoS amplification attacks are using home and small office routers as a jumping off point. Attackers are taking advantage of weak router configuration and lax policies against open resolvers to execute attacks.
A researcher has identified a number of issues with the security of the Tesla S, including its dependence upon a weak one-factor authentication system linked to a mobile app that can unlock the car remotely.
Internet service providers in Turkey have been intercepting traffic to Google’s DNS servers and redirecting it.
Some versions of Philips internet-enabled SmartTVs are vulnerable to cookie theft and an array of other tricks that abuse a lax WiFi setting.
The federal government is looking for a way to relax the laws to make it simpler for law enforcement agents to target and compromise the computers of suspects involved in criminal cases.
When attackers broke into the network of the University of Maryland last month, the university’s wasn’t sure how to react. The organization had never had a major security incident before, and this one qualified as major: 310,000 Social Security numbers and other information was gone. And then three weeks later, it happened again. Wallace Loh, […]
Hackers were able to compromise a server used by Electronic Arts Games this week and rig one of its websites to resemble an Apple log-in page to dole out phishing attacks.
The software running the Bitcoin network was updated to resolve the transaction malleability issue that took down popular exchange Mt. Gox.
Research this week makes it’s clear that many attackers are still using point of sale malware, namely Dexter and Project Hook, in active attacks.
Social networking site Meetup.com is finally back online today yet it warns the site could still face future outages following a series of sustained denial of service attacks (DDoS) over the weekend.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
