The attack is similar to the Black Ruby, Zenis, and HiddenTear / InfiniteTear ransomware variants and seems to utilize unsecured Remote Desktop services.

The team at Malwarebytes has identified a weakness in the encryption scheme utilized by the LockCrypt ransomware that they can exploit to recover a victim's data.

A while ago we investigated a setup of Citrix ShareFile with an on-premise StorageZone controller. ShareFile is a file sync and sharing solution aimed at enterprises. While there are versions of Sh…

Data Breaches - Hudson's Bay Company, Under Armor MyFitnessPal, and Panera Bread, all this and more on this week's GlassHouse Gazette! To learn more about ho...

Testing shows the presence, not the absence of bugs. Edsger W. Dijkstra Two common types of testing are black-box and white-box testing. Both can drive or be driven by development. Black-box testin…

pwntrace - Use ltrace with pwnlib.tubes.process instances, useful for heap exploitation. Pwntools rocks!

Roskomnadzor, Russia's telecommunications watchdog, has filed today a lawsuit against instant messaging app Telegram, asking a Moscow court to rule in favor of restricting access to the service inside Russia's borders.

Three months after news first leaked, Microsoft officially announced today the launch of new anti-ransomware features for Office 365, the company's commercial subnoscription-based office tools suite.

Unit 42 examines the Reaper Group’s updated mobile arsenal, including a Bitcoin Ticker Widget and a PyeongChang Winter Games application.

1 points and 0 comments so far on reddit

The researchers say it's the largest attack since the Mirai-powered cyberattack in October 2016 that took down large swathes of the Western internet.

A T-Mobile Austria customer representative made a shocking admission in a Twitter thread.

@c_pellegrino @PWTooStrong @Telekom_hilft Hello Claudia! The customer service agents see the first four characters of your password. We store the whole password, because you need it for the login for https://t.co/vJapgJ50qc ^andrea

Next-Generation Video Platform and Content Exchange, Tout powers mobile video publishing and syndication for over 500 leading media brands globally to an audience of over 150MM unique users per month.

Learn how to exploit Bluetooth Low Energy for IoT Devices using a step-by-step guide. In this post, we are using Gattacker to perform sniffing and replay based attacks.

The Cisco Security portal provides actionable intelligence for security threats and vulnerabilities in Cisco products and services and third-party products.

At Heroku we consistently monitor vulnerability feeds for new issues. Once something drops, we jump into action to triage and determine how our platform...