Tuesday, June 30, 2015
           (757) 873-6707                     Monday - Friday, 9 am - 5:30pm
Samsung to Patch Windows Update Issue Within Days Samsung said today it will no longer automatically disable Windows updates on PCs and laptops it manufactures and will release a patch "within a few days."
IETF Officially Deprecates SSLv3 The IETF, in RFC7568, declared SSLv3 "not sufficiently secure" and prohibited its use. SSLv3 fallbacks were to blame for the POODLE and BEAST attacks.
New Chrome Extension Blocks BeEF Attacks An engineer has come up with a new way to help combat BeEF, or browser exploit framework attacks.
Default SSH Key Found in Many Cisco Security Appliances Many Cisco security appliances contain default, authorized SSH keys that can allow an attacker to connect to an appliance and take almost any action he chooses.

Latest News

Apple Patches Dozens of Flaws in iOS 8.4, OS X 10.10.4

Apple has released new versions of iOS and OS X, both of which include a significant number of security patches, several for bugs that can lead to remote code execution and other serious issues. Version 8.4 of iOS contains fixes for more than 30 security vulnerabilities, including bugs in the iOS kernel, WebKit, and CoreText. […]

Amazon Releases S2N TLS Crypto Implementation to Open Source

Amazon’s home grown TLS implementation called s2n (signal to noise) was released to open source. s2n is a mere 6,000 lines of code and will be integrated into a number of Amazon Web Services.

Cyber UL Could Become Reality Under Leadership of Hacker Mudge

One of the longstanding problems in security–and the software industry in general–is the lack of any universally acknowledged authority on quality and reliability. But the industry moved one step closer to making such a clearinghouse a reality this week when Peiter Zatko, a longtime researcher and hacker better known as Mudge in security circles, announced […]

Five Arrested in Zeus, SpyEye Group Takedown

Authorities in six different countries worked together last week to take down a cybercrime ring which ultimately infected tens of thousands of computers with Zeus and SpyEye malware and made off with roughly $2.25 M dollars from banks in the process.

Researcher Says LG App Update Mechanism Doesn’t Verify SSL Cert

Many smartphones manufactured by LG contain a vulnerability that can allow an attacker to replace an APK file with a malicious file of his choice. The problem is the result of several conditions on LG phones. Like other manufacturers, LG includes custom apps on its handsets, which are not available through the normal Google Play […]

Amazon Patches Certificate Vulnerabilities in Fire Phones

Amazon patched three vulnerabilities in its Fire Phone, two of which allow for silent certificate installations.

Searches for Pirated Content Lead to Pain and Little Gain

People love to try and get something for nothing, especially on the Internet where there’s all kinds of things available for nothing. But a lot of those free things are illegal and attackers have become very adept at taking advantage of users’ desire for free episodes of Gilmore Girls or bonus Dragon Ball Z content. Researchers […]

Magnitude Kit Exploiting Flash Zero Day, Dropping Cryptowall

Exploits for the recently patched Adobe Flash Player zero-day have appeared in the Magnitude Exploit Kit and are leading to Cryptowall ransomware infections.

NIST Drops Weak Dual_EC RNG From Official Recommendations

NIST officially has removed the controversial and compromised Dual_EC_DRBG from its list of recommended algorithms for generating random numbers.

Threatpost News Wrap, June 26, 2015

Dennis Fisher and Mike Mimoso talk about the Cisco default SSH keys, more details of the OPM data breach, the Adobe 0-day and why we never hear about bad APT groups, only the really good ones.