Rare UEFI Malware Found in the wild Kaspersky says
By Mark Lechtik, Igor Kuznetsov, Yury Parshin
Part II. Technical details (PDF)
UEFI (or Unified Extensible Firmware Interface) has become a prominent technology that is embedded within designated chips on modern day computer systems....
Hunting for exploits by looking for the author’s fingerprints
Graphology of an Exploit – Hunting for exploits by looking for the author’s fingerprints
Research by: Itay Cohen, Eyal Itkin
In the past months, our Vulnerability and Malware Research teams joined efforts...
Ransomware Attacks Slows Down AstraZeneca Coronavirus Clinical Trial
The ransomware attack at eResearchTechnology that provides software to manage clinical trials data forced researchers to switch to pen and paper, halting their progress at a crucial time
By Krishnendu Banerjee
As...
Russian operation masqueraded as right-wing news site to target U.S. voters
By Jack Stubbs
The Russian group accused of meddling in the 2016 U.S. election has posed as an independent news outlet to target right-wing social media users ahead of this year’s...
Exploit for Firefox 68 on Android Local Area Network SSDP Screencast
Firefox for Android LAN-Based Intent Triggering
Exploit research and development by Chris Moberly (Twitter: @init_string)
Overview
The SSDP engine in Firefox for Android (68.11.0 and below) can be tricked into triggering Android...
Chinese APT SilentFade Defrauded Facebook Users of 4 Million
At the Virus Bulletin 2020 conference , the Facebook security team revealed one of the most challenging malware operations it has ever faced.
The expert report was dedicated to the Chinese hack group...
Magento Based Stores See Biggest Attack Due to 0day flaw
Well-known cybersecurity expert and founder of Sanguine Security (SanSec) Willem de Groot (Willem de Groot) warned of the largest ever campaign aimed at compromising online stores based on the e-commerce platform...
Zero Day Survival Guide | Everything You Need to Know Before Day One
by SentinelOne
Zero day. Perhaps the most frightening words for any IT leader to hear. For security researchers, zero days are one of the more fascinating topics, the crown jewel of...
Over 61% of Exchange servers vulnerable to CVE-2020-0688 attacks
By Pierluigi Paganini
More than 247,000 Microsoft Exchange servers are still vulnerable to attacks exploiting the CVE-2020-0688 RCE issue impacting Exchange Server.
The CVE-2020-0688 vulnerability resides in the Exchange Control Panel (ECP) component, the root...
North Korean Hackers target UN Security Members
New UN Security Council report reveals repeated targeting of UN Security Council officials over the past year
By Catalin Cimpanu
Today's security threats have expanded in scope and seriousness. There can now...
