Apple Phishing Scam Steals Credentials, Credit Cards
An email phishing scam uses a realistic-looking Apple login page in order to pilfer Apple ID usernames and passwords before moving on to steal user credit card information.
Uncategorized
Targeted Attacks Exploit Microsoft Word Zero Day
Microsoft issued an advisory today warning of targeted attacks against a zero-day vulnerability in Microsoft Word. The exploits in the wild target Word 2010, but the Office software is vulnerable all the way back to Word 2003.
Google Encrypts All Gmail Connections
On Thursday Google switched its Gmail service to HTTPS only, enforcing SSL encryption on all Gmail connections.
A quick research project done by a graduate student at Stanford on the security of hashed MAC addresses in retail analytics software has shown that time and the inevitable advancement of technology have are the greatest enemies of cryptography.
Sally Beauty Supply confirmed Monday that an attacker was able to penetrate its system and make off with “fewer than 25,000 records” of its customers’ sensitive banking information.
Microsoft said it will patch a zero-day vulnerability in Internet Explorer 10 being exploited in watering hole attacks. The patch is one of five bulletins expected next Tuesday.
Security researchers have been investing in developing exploits for Microsoft’s Enhanced Mitigation Experience Toolkit (EMET), but hints are surfacing that hackers are taking notice too.
Apple updated its iOS Security guide with new information on the encryption and security processes protecting iCloud Keychain, Recovery and Internet services such as iMessage, FaceTime and more.
Microsoft released a technical preview of EMET 5.0 that includes two new exploit mitigations, including Attack Surface Reduction which gives users more control where and when plug-ins are loaded into applications.
Researchers at Bromium Labs are expected to deliver a paper today that explains how they were able to bypass all of the memory protection mitigations in Microsoft’s Enhanced Mitigation Experience Toolkit
