Banking Trojans Nymaim, Gozi Merge to Steal $4M
“Double-headed beast” Trojan, GozNym, drains $4 million from banks in past two weeks.
Web Security
Latest Chrome Update Addresses Two High-Severity Vulnerabilities
Google updated Chrome to version 50.0.2662.75, patching 20 vulnerabilities, including two high-severity bugs that qualified for rewards.
Decryption Tool Stifles Jigsaw Ransomware
Jigsaw ransomware makes big data-destructing threats to victims, but its bark may be worse than its bite now that security experts have found a way for victims to decrypt systems for free.
Researchers spot new wave of Qbot infections that can shape-shift every six hours to evade detection.
Current versions of IBM SDK 7 and SDK 8 remain vulnerable to a 2013 Java vulnerability. Security Explorations discovered the original patch is broken and disclosed details on the flaw and a proof-of-concept exploit.
Microsoft released six critical vulnerabilities in addition to patching the much-hyped Badlock vulnerability.
The much anticipated Badlock vulnerability wasn’t in the SMB protocol after all, but in SAM and LSAD and exposed Windows machines to privilege escalation.
Atmos banking malware has perilous pedigree that includes Citadel and ZeuS.
The age of self-propagating ransomware, or cryptoworms, is right around the corner, says Cisco Talos.
Security and privacy advocates, along with IT business leaders, slam the Burr-Feinstein bill as misguided and detrimental to encryption.
