Microsoft issued new security guidance on the Credential Security Support Provider protocol (CredSSP) vulnerability (CVE-2018-0886) that could allow remote code execution. As part of the updates, Microsoft plans to soon prevent un-patched RDP clients (that uses CredSSP) from authenticating to Windows.
Microsoft fixes CredSSP vulnerability Read More »
Researchers at Purdue University have developed a new tool dubbed R2D2 (short for “Reactive Redundancy for Data Destruction Protection”) that can protect systems from disk-wiping malware such as Shamoon and Stonedrill.
R2D2 thwarts disk-wiping malware Read More »
GitHub ran a security scan to find old vulnerabilities in JavaScript and Ruby libraries in over a half million public repositories. The scan results turned up over four million vulnerabilities and sent alerts to developers to patch the bugs. GitHub is leading software development platform used to host, review and manage software source code, used by millions of developers.
GitHub scans and finds 4M vulnerabilities Read More »
Citrix has released patches for Citrix XenServer that address several vulnerabilities. If exploited, an attacker or malicious administrator of a guest VM could crash or compromise certain XenServer hosts.
Citrix security updates for XenServer Read More »
Expedia subsidiary Orbitz has determined on March 1, 2018 that personal data stored on their platform was compromised.
Orbitz data breach, 880K payment cards and personal data affected Read More »
A suspected Chinese-linked cyber espionage campaign dubbed Temp.Periscope has been targeting engineering and maritime industries. FireEye has observed a spike in the campaign activity since early 2018 and has tracked the activity since 2013.
TEMP.Periscope cyber espionage group targets Engineering and Maritime Industries Read More »
Russian government cyber activity has targeted U.S Government entities, energy and other critical infrastructure sectors. The activity has been active since at least March 2016, according to a US-CERT Technical Alert (TA).
Russian cyber activity targets critical infrastructure and energy sectors Read More »
Proofpoint security researchers have found a new Traffic Distribution System (TDS) dubbed BlackTDS for sale on the Dark Web.
BlackTDS cyber threat Read More »
Researchers at Kroll Cyber Security have identified a new point of sale (POS) malware dubbed PinkKite that has a tiny footprint of just 6K to avoid detection, similar to other POS malware families TinyPOS and AbaddonPOS.
PinkKite POS malware Read More »
Security researchers from FireEye have spotted an Irananian threat group dubbed “TEMP.Zagros” that is targeting government and defense organizations in Asia and the Middle East.
Iranian spear phishing campaign Read More »
