Month: February 2019

0 Comments
A researcher recently discovered an info-stealer — dubbed Vidar — that is a part of a multi-payload and ongoing malvertising attack that also distributes GandCrab ransomware. How does this double attack work? Who is a target for the attack and how can it be mitigated? Malware infections haven’t changed much over time, even taking into
0 Comments
Australian Prime Minister Scott Morrison has blamed a “sophisticated state actor” for the recent attempt to hack the parliament’s computer network. On February 8 news broke of the malicious activity which resulted in password resets for government workers. Speaking today, PM Morrison said that there was “no evidence of electoral interference” and that steps were
0 Comments
Rudina Seseri Contributor Rudina Seseri is founder and managing partner at Glasswing Ventures, an Entrepreneur-In-Residence at Harvard Business School and an Executive-In-Residence for Harvard University’s Innovation Lab. More posts by this contributor The problem with ‘explainable AI’ How do we change the dynamics of the VC industry? At a high level, the American AI Initiative
0 Comments
The Australia government suffered a cyber attack that it suspects is the work of a “sophisticated state actor,” according to the country’s Prime Minister. PM Scott Morrison said today the computer network of the country’s parliament, and those belonging to Liberal, Labor and Nationals parties, were targeted by an attack which took place a few weeks ago, The Sydney
0 Comments
Google this week touted security improvements based on human help, rather than algorithm smarts alone. Google announced, in 2018, its bug bounty program — aka Vulnerability Reward Program — paid out $3.4 million in total rewards to 317 researchers who submitted issues. Those 317 researchers, from 78 different countries, earned more than 1,300 rewards, with
0 Comments
As the value of Bitcoin and other cryptocurrencies continues to fluctuate while governments consider marketplace regulations, J.P. Morgan announced that is launching the first US bank-backed cryptocurrency, JPM Coin. “The JPM Coin is based on blockchain-based technology enabling the instantaneous transfer of payments between institutional accounts,” the press release stated. “Exchanging value, such as money, between different
0 Comments
Ubuntu and some other Linux distributions suffer from a severe privilege escalation vulnerability that could allow a local attacker or a malicious program to obtain root privileges and total control over the targeted system. Dubbed “Dirty_Sock” and identified as CVE-2019-7304, the vulnerability was discovered by security researcher Chris Moberly, who privately disclosed it to Canonical,
0 Comments
“The book itself is a curious artefact, not showy in its technology but complex and extremely efficient: a really neat little device, compact, often very pleasant to look at and handle, that can last decades, even centuries. It doesn’t have to be plugged in, activated, or performed by a machine; all it needs is light,
0 Comments
Two different WordPress plugins have caused a few headaches this week. Hackers reportedly exploited an old vulnerability found in the WordPress plugin WP Cost Estimation & Payment Forms Builder, according to Wordfence. A second and critical vulnerability was also found in the Simple Social Buttons plugin, according to WebARX. The flaw in the WP Cost Estimation plugin, which is
0 Comments
An interview with ESET malware researcher Lukáš Štefanko about Android banking malware, the topic of his latest white paper Banking malware continued to plague the Android platform throughout 2018, with cybercrooks relentlessly targeting users with banking Trojans and fake banking apps, but also experimenting with new money-stealing techniques. To help users navigate the tricky and
0 Comments
In the aftermath of multiple reports that millions of stolen records were dumped on the dark web, the dating app Coffee Meets Bagel confirmed that the accounts of approximately six million users were compromised in a breach, according to a Coffee Meets Bagel (CMB) spokesperson. The company also said that the stolen data was indeed part of