Have you heard of the lawsuit between Google and Oracle? Filed several years ago, the lawsuit Oracle America, Inc. v. Google, Inc. has now been resolved, in Google’s favor. A jury in California’s Northern District federal court just declared that…
If you’re an Android user, you should be extra careful since another dangerous malware, a banking Trojan, is currently targeting the operating system. McAfee researchers have called the threat SpyLocker. SpyLocker displays phishing pop-up windows with credential prompts addressed at…
Passwords will soon be obsolete, and Google’s Advanced Technology and Projects (ATAP) Project Abacus is here to show us how the future may actually happen. We’ve heard many infosec gurus claim that the password as we know it is coming…
Encryption continues to be the center of discussions – be it ransomware’s encryption, WhatsApp’s end-to-end encryption… or Apple’s encryption debate. Speaking of Apple, the company just rehired a mobile encryption pioneer, Jon Callas, quite possibly to address the pressure from…
Image Source: Stephencdickson/ Wikipedia LinkedIn’s data breach is already becoming one of the most controversial and troubling recent data incidents. And it proves that a data breach is definitely a breach in trust – between the vendor and the end…
Have you changed your LinkedIn password yet? As we wrote yesterday, the popular social network for professionals has been through a major data breach. To sum it up, 167 million compromised accounts, of which 117 million credentials with hashed passwords…
TeslaCrypt ransomware has turned many users into victims. However, this ransomware story may be coming to its foreseeable end. According to an ESET researcher, the vicious file-encryption operation is now shut down. A free decryption key is available to anyone…
The Get Windows 10 App has caused many users many headaches. Because of its aggressive Get Window 10 campaign, Microsoft has been in and out of controversies for quite some time. Fortunately, the company has decided to change the way…
If you’re a professional in any business area, there’s a big chance you have a LinkedIn account. So read carefully – LinkedIn has suffered a major data breach. The latter has apparently led to probable sale of sensitive information harvested…
If you’re a user of Cisco’s Adaptive Security Appliances (ASAs), you should probably have a look at their latest patches. The patches are addressing two separate issues, CVE-2016-1385, a flaw in the ASA XML parser, and CVE-2016-1379, a VPN block…
Shortly after Pornhub announced their Bug Bounty program, a gray hat hacker known as Revolver released claims that the website’s web server was compromised. Were his claims true or just a cry for attention? Let’s see. Read More about PH’s…
Bitdefender security researchers have discovered a clickbot, dubbed Redirector.Paco which has continuously abused companies’ Google advertising revenues. Cristina Vatamanu, Răzvan Benchea, and Alexandru Maximciuc have discovered that the botnet’s start of activity dates back to September 2014. Since then, over…
Software products are not perfect and can be full of vulnerabilities, anti-virus software included. Bug hunters and white hats are usually the ones to disclose flaws in applications, and to notify the vendors so that a fix is implemented. If…
Vulnerabilities in Adobe’s Flash Player may seem trivial but yet they are among the flaws mostly leveraged by attackers. Perhaps that’s a reason good enough for Google to decide to make HTML5 the primary standard in Chrome. Only 10 white-listed…
WhatsApp’s recent adoption of end-to-end encryption was a big deal in the cyber security community. However, a research conducted by Positive Technologies reveals that the end-to-end encryption in services such as WhatsApp and Telegram is vulnerable. More specific, researchers have…
CVE-2016-0167, a zero-day exploit addressed in April’s Patch Tuesday, has apparently been leveraged by attackers, FireEye research reveals. Cyber criminals have exploited the vulnerability in targeted attacks on more than 100 US companies. FireEye’s blog post on the matter discloses…
Many big companies and vendors have bug bounty programs which encourage independent researchers in locating and disclosing vulnerabilities. Pornhub has just joined the bug bounty initiative, as it just launched a program on HackerOne’s platform, which aims to protect and…
You’re most likely familiar with 7-Zip, the open-source file archiving application that offers optional AES-256 encryption, support for large files, and the capacity to use all kinds of compression, conversion and encryption methods. The app is also suitable for Windows…
If you’re a daily reader of IT security and tech news, you have a good idea of phishing and spear phishing attacks. Nonetheless, even if you’re perfectly acquainted with these widely deployed social engineering schemes, you should be on the…
Microsoft has just released its security updates for May 2016. And they’re quite major! Two zero-days vulnerabilities have been disclosed, and they’re both crucial – one in Windows, and one in Adobe’s Flash Player. Security experts warn that the Windows…
