A new research on 4000 devices from 70 different vendors reveals the alarming reuse of private keys. The research has been led by Stefan Viehböck from SEC Consult. The senior security consultant has investigated the HTTPS certificates and SSH keys…
You would think that a corporate giant such as Microsoft would deal with an ongoing issue in a gallant and user-friendly way. However, lately things appear to be more chaotic than gallant over at MS headquarters. And we have one…
Data breaches happen more often than vendors would like to admit. One of the latest security breaches concerns a big management provider – Pearson VUE has suffered an intrusion followed by a malware attack on its Credential Manager System. Learn…
Microsoft is in the spotlight once again. SC Magazine UK has just reported that a problem concerning the Advanced Threat Protection module has been unveiled. The problem exists within the Safe Links component of the product. It allows malicious URLs…
Have you switched to Windows 10 yet? Microsoft’s attempts to force its latest operating system on as many users as possible aren’t a secret. Microsoft’s Corporate Vice President Joe Belfiore even admitted it recently by claiming that core data collection…
Our first giveaway of a 100$ Amazon gift card came to an end last week on Thursday (Nov. 12th) and we have already selected the winner on a random basis – Dao Van Vuong from Japan. We are web security…
A minor bug that enables anyone to manipulate the life events of any user has been just reported by the independent bug hunter Sachin Thakuri. Even though it’s not of technical or security nature, the bug can be blamed for…
Аs we have said many times, encryption by ransomware is one of the top threats out there. SentinelOne may not be the only security firm trying to defeat criminally encrypted data but they are likely the first ones to release…
The intensity of malicious attacks that have applied exploit kits (EKs) has increased during the last couple of years. In fact, by having a look at quarter three of 2015, one will notice at once that the exploitation of exploit…
Andrei Costin (Eurecom), Apostolis Zarras (Ruhr-University Bochum), Aurelien Francillon (Eurecom) performed a research tht unveils the vulnerability of many COTS. A prevalent number of the future hacks that await us involve the Internet of Things. One of the studies, carried…
Encryption is not something bad. In fact, encryption tools are initially designed to be of help, protecting data and keeping it away from malicious intentions. No matter how good it is, encryption has been in the center of many debates.…
Windows 10 version 1511 is finally here. Also referred to as Fall Update and Treshold 2, the Windows-as-a-service upgrade has been seen to cause some issues (no surprises here, really). Users have already shared their complaints on Microsoft answers and…
Despite all the controversies it has triggered, Windows 10 continues its evolution. Its first major update is already available. Let’s see what’s new and better in Windows 10 version 1511, also referred to as Threshold 2, Fall Update, build 10586.…
This just in – Microsoft has just re-released the problematic update from MS15-115 KB 3097877. There’s scarce information about the ‘update’ published on Microsoft’s support page under the same patch. Here’s the paragraph: ‘This security update was rereleased on November…
Cryptography has been a central topic in the field of Web security. One of the aspects that concern many web masters – cryptographically crafted passwords – has just turned into a hot spot. Several beloved PHP projects are about to…
We were just wondering if some of the latest Windows patches from November 10 would cause issues. Today we ‘woke up’ to the news that one of them – KB 3097877 from MS15-115 bulletin – has brought troubles to Outlook.…
Apart from detecting and disposing malicious attacks, security researchers and analysts have another important job. To predict the future. McAfee Labs have just released a prediction report that looks 5 years ahead and outlines the changes in the threat landscape…
Yet another Patch Tuesday (November 10 2015) has rolled out, and the result is 21 new updates, 15 of which are listed as Important and 8 as Recommended. Keep in mind that if you install updates automatically, you may easily…
Windows XP may not be officially supported by Microsoft any longer, but about 250 million users still prefer it over newer Windows versions. At least these were the numbers by Net Applications and StatCounter for March 2015. Support to End…
Linux is not only targeted by DDoS attackers but also by ransomware writers. Linux is now endangered by a threat registered as Linux.Encoder.1, first spotted by Dr. Web’s security researchers. Linux.Encoder.1 targets Linux-powered websites and servers by encrypting MySQL, Apache…
