cyberscoop.com · News

News listings from cyberscoop.com on TechiSeek. 990 public listings.

• $1 million bounty offered for Tor Browser zero-day exploits (cyberscoop.com)
  Zerodium says the Tor bounty is to help "government customers fight crime and make the world a better and safer place for all."
• Middle Eastern hacking group is using FinFisher malware to conduct international espionage (cyberscoop.com)
  The discovery by Kaspersky Lab marks at least the fifth zero-day exploit used by the so-called BlackOasis group and exposed by security res…
• Cellebrite: Hacking into iPhones is harder than ever (cyberscoop.com)
  Cellebrite is beginning to change its sales message: Their ability to crack iPhones is diminishing.
• White House unveils process behind disclosing software vulnerabilities (cyberscoop.com)
  The White House released a charter Wednesday that will give more clarity and bring more transparency to the vulnerabilities equities proces…
• Meet the french researcher the Shadow Brokers keep calling out (cyberscoop.com)
  A 29-year-old French security researcher and entrepreneur, Matthieu Suiche is one of the foremost experts when it comes to the peculiar gro…
• Massive supply chain cyberattack on the horizon in Ukraine, according to police (cyberscoop.com)
  The attack may come through another booby-trapped software update, according to a cryptic press release published Thursday by the Secret Se…
• Experts ask: Why does the VEP cut out health care agencies? (cyberscoop.com)
  Critics say the new U.S. policy for deciding how to deal with software flaws, effectively sidelines consideration of the programs that run…
• Critical vulnerability found in Microsoft Malware Protection Engine (cyberscoop.com)
  The vulnerability was found and reported by an organization under GCHQ.
• Researchers find zero-day exploit discovered on DirecTV hardware (cyberscoop.com)
  Despite being told six months ago, Linksys has yet to fix a zero-day found by Trend Micro researchers.
• Hacker exploits router zero-day vulnerability in efforts to build Mirai-like botnet (cyberscoop.com)
  Just like the original Mirai attacks, this version traces back to the notorious HackForums.
• Meltdown and Spectre, the chip flaws causing problems for nearly everyone (cyberscoop.com)
  Most people are impacted by the vulnerabilities. It's also not clear if the exploits have been used in the wild because neither leave any t…
• Trisis has mistakenly been released on the open internet (cyberscoop.com)
  An elite cyberweapon has been publicly sitting online due to a mistaken upload to VirusTotal, three sources familiar with the matter told C…
• Intel rushes to deploy firmware updates for critical CPU bug by end of next week (cyberscoop.com)
  Intel promised to deploy a range of software and firmware updates by the end of next week for over 90 percent of processor products sold wi…
• Schneider Electric: Trisis leveraged zero-day flaw, used a RAT (cyberscoop.com)
  Schneider Electric had remained largely silent about an August incident where Trisis shut down operations at a Saudi energy plant.
• Intel tells customers to skip buggy patches for Spectre and Meltdown (cyberscoop.com)
  Information on new patches is expected later this week.
• Microsoft rushes Windows patch disabling Intel’s Spectre fixes due to instability (cyberscoop.com)
  Social media is filled with reports of problems and time lost to the buggy patches.
• Cisco patches a perfect 10.0 'critical' flaw in its popular security appliance (cyberscoop.com)
  Cisco announced Monday a critical vulnerability in two popular enterprise products that allows an unauthenticated, remote attacker to execu…
• $45,000 bounty offered for Linux zero days (cyberscoop.com)
  The $15,000 price bump is likely a result of higher demand.
• Bug in Grammarly browser extension exposes what a user ever writes (cyberscoop.com)
  The browser extension has access to virtually everything a user types and therefore an attacker could access a huge trove of private data.
• Drones emerge as new dimension in cyberwar (cyberscoop.com)
  Companies are selling drones that hack and hacks for drones.
• Telegram zero-day used to spread cryptomining malware (cyberscoop.com)
  The zero day is exploitable through the way the app's Windows client manages a Unicode character that reverses the direction of text. A Jav…
• uTorrent vulnerabilities allow information disclosure and remote code execution (cyberscoop.com)
  Users of the file-sharing app were left exposed for several hours while the bug was public and a new security patch didn't quite work. A ne…
• China's security researchers stopped from attending Pwn2Own (cyberscoop.com)
  The Chinese government has taken steps to bar its country's security researchers from sharing their knowledge at some foreign cybersecurity…
• AMD chip flaws are bad, but the disclosure process was worse (cyberscoop.com)
  A small cybersecurity company is reporting major vulnerabilities in chips made by AMD, yet the disclosure itself has sent researchers into…
• Hackers beat Firefox and Safari to earn $105K at Pwn2Own (cyberscoop.com)
  Chinese contestants from major companies had been dominating the contest in recent years, but new regulations from Beijing prohibited them…
• Pwn2Own sees $135,000 paid out in first day due to Safari, Edge exploits (cyberscoop.com)
  Exploits targeting Apple Safari and Microsoft Edge web browsers were the highlight of Pwn2Own's first day.
• Phishing attacks against mobile devices rise 85 percent annually (cyberscoop.com)
  People can talk about zero-day exploits, IoT botnets and APTs all day long, but often times the simplest approach for attackers remains the…
• DARPA is looking to avoid another version of Meltdown or Spectre (cyberscoop.com)
  The Pentagon's R&D wing has contracted Tortuga Logic to develop security tools that use testing platforms to catch vulnerabilities in compu…
• With cryptojacking rising, exploit kits rapidly decline (cyberscoop.com)
  Exploit kit development cratered by 62 percent in 2017 driven by the rise of cryptojacking, improved browser security and specific victim t…
• Pakistani military leverages Facebook Messenger for wide-ranging spyware campaign (cyberscoop.com)
  The malware, dubbed Stealth Mango and Tangelo, appears to have successfully compromised government officials, medical professionals and civ…
• Nation-state hackers attempted to use Equifax vulnerability against DoD, NSA official says (cyberscoop.com)
  An NSA official says 24 hours after Equifax's breach was made public, a nation-state was scanning DoD for unpatched Apache Struts instances.
• National Security Council delays publication of cyber strategy over inclusion of 'offensive' (cyberscoop.com)
  The Trump administration's cyber deterrence strategy is now delayed due to infighting over the inclusion of a more "offensive" policy, two…
• Vulnerability remediation startup Vulcan Cyber launches with $4 million in seed funding (cyberscoop.com)
  Vulcan Cyber wants to close what it sees as a vulnerability remediation gap.
• Playing nice? FireEye CEO says U.S. malware is more restrained than adversaries' (cyberscoop.com)
  Researchers can see public policy elements when analyzing nation-state malware, and FireEye's CEO says if it's more restrained it's often f…
• Crowdfense aims to bring 'transparency' to shady exploit market (cyberscoop.com)
  In an industry that tends to be quiet by design, Crowdfense is deliberately making noise.
• Chinese group said to use HackingTeam tools to spread ransomware, cryptominers (cyberscoop.com)
  A sophisticated Chinese cybercrime group is using old, leaked computer code from a notorious cyber-arms dealer, known as "HackingTeam," to…
• Tech giants reveal new variant of Meltdown and Spectre vulns (cyberscoop.com)
  Intel and Microsoft have revealed a new variant of the Meltdown and Spectre chip vulnerabilities that have plagued their products in recent…
• Flash zero-day shows up in Qatar amid geopolitical struggles (cyberscoop.com)
  A zero-day vulnerability in Adobe Flash was recently used to infect a likely diplomatic target in Qatar with malware, new research from Sea…
• L3 Technologies acquires two hacking companies (cyberscoop.com)
  Azimuth Security and Linchpin labs, both based in Australia, reportedly sell zero-day exploits to Five Eyes intelligence agencies.
• How private companies handle attributing governments to hacking operations (cyberscoop.com)
  Cybersecurity companies are becoming increasingly capable of burning intelligence collection efforts by governments, But with this new foun…
• Report: Powerful spyware used to target Amnesty International employee and Saudi activist (cyberscoop.com)
  It looks to be another instance of Pegasus, the mobile spyware from NSO Group.
• U.S. poised to deny China Mobile access to American market due to spying fears (cyberscoop.com)
  On Monday, the Trump administration moved to block a large Chinese telecommunications company from entering the U.S. market, recommending t…
• U.S. sanctions Russian companies linked to FSB (cyberscoop.com)
  The U.S. sanctioned five Russian entities and three Russian individuals on Monday under the authority of an Obama-era executive order on sa…
• Capsule8 raises $15 million for automated threat detection platform (cyberscoop.com)
  Capsule8 says its platform can scale and adapt to hybrid environments, particularly production environments, to detect and stop threats.
• NetSpectre attack can exploit CPUs to leak information remotely, researchers say (cyberscoop.com)
  NetSpectre is an attack that can exploit CPUs to leak information remotely, unlike the original Spectre attack (but it's super slow).
• How to combat the long lives of zero-day vulnerabilities (cyberscoop.com)
  Nyotron CTO Nir Gaist talks about how to deal with misconceptions around zero day vulnerabilities and what enterprises can do to guard agai…
• Pegasus spyware active in 45 countries, Citizen Lab says (cyberscoop.com)
  An infamous brand of mobile spyware may be operating in 45 countries as part of a sprawling footprint that could enable human rights abuses…
• Microsoft patches zero-day exploit against Internet Explorer (cyberscoop.com)
  The vulnerability is exploited by visiting a malicious web page or opening a malicious Microsoft Word document rendered with Internet Explo…
• Zero-day in popular video surveillance technology goes public, unpatched (cyberscoop.com)
  "The Peekaboo flaw is extremely concerning because it exploits the very technology we rely on to keep us safe," Tenable chief technology of…
• Spy campaign targeting Pakistani officials installs malware, then surrenders (cyberscoop.com)
  Cylance says White Company has the hallmarks of a state-backed hacking group and its campaign is likely still active.