Microsoft Provides Guidance on Mitigating DDE Attacks
Microsoft published guidance for Windows admins on how to safely disable Dynamic Data Exchange (DDE) fields in Office that are being used to spread malware in email-based attacks.
Web Security
IoT is Insecure, Get Over It! Say Researchers
Security experts Charlie Miller and Chris Valasek, contemplate the larger universe of the Internet of things and security.
Privacy Clouds Form Over Mantistek Gaming Keyboard
Questions brew over whether Mantistek GK2 Mechanical Gaming Keyboard is snooping on users as they type.
Enterprises are grappling with widespread incidents of misconfigured servers leaking sensitive data to the public internet.
The Tor Project released a patch for a vulnerability that leaks the real IP addresses of macOS and Linux users of its Tor Browser.
Zeus Panda, a banking Trojan designed to steal credentials, is being distributed via poisoned Google search results.
Researcher Troy Hunt discovers as far as the internet has come in adopting HTTPS, it still has a ways to go.
A bug exploitable in WordPress 4.8.2 and earlier creates unexpected and unsafe conditions ripe for a SQL-injection attack.
A cybercrime outfit stealing from as many as 10 banks in Russia, Armenia and Malaysia has borrowed heavily from one of the kingpins in this realm, Carbanak.
Firefox is to stop using the privacy-busting canvas-based browser fingerprinting that allows websites to track users’ online activities.
