Skip to main content

Security

Cyber attacks cost the UK economy £1.9 billion

posted onFebruary 27, 2017
by l33tdawg

Eighteen percent of UK businesses have been the target of a cyber-attack in the last 12 months, according to a new report by Altodigital. These attacks cost the economy £1.9 billion.

Back in 2013 33 percent of companies were hacked, so Altodigital sees the current figure of 18 percent as a "welcome improvement." Each individual attack cost more than £2,000 last year.

Malware Lets a Drone Steal Data by Watching a Computer’s Blinking LED

posted onFebruary 22, 2017
by l33tdawg

A few hours after dark one evening earlier this month, a small quadcopter drone lifted off from the parking lot of Ben-Gurion University in Beersheba, Israel. It soon trained its built-in camera on its target, a desktop computer’s tiny blinking light inside a third-floor office nearby. The pinpoint flickers, emitting from the LED hard drive indicator that lights up intermittently on practically every modern Windows machine, would hardly arouse the suspicions of anyone working in the office after hours.

Google – Once Again – Publicly Discloses Windows Bug After Microsoft Fails to Patch It

posted onFebruary 20, 2017
by l33tdawg

Google is once again dropping the same bomb on Microsoft – disclosing a vulnerability publicly after the company failed to patch it in time.

The Redmond software giant was expected to a send a security update on Patch Tuesday last week. However, it failed to do so and said that the updates will now be released “as part of the planned March Update Tuesday,” on March 14, 2017 – a whole month after they were supposed to go live.

DuckDuckGo Ups Ante: Gives $300K to ‘Raise the Standard of Trust’

posted onFebruary 16, 2017
by l33tdawg

The search engine DuckDuckGo isn’t Google — in more ways than one. For starters, its whole premise is to not follow you around as you surf the web. It’s also not rich, so it doesn’t have gazillions of dollars to throw at whatever project strikes its fancy. However, the people who run the little search engine that can are very generous with what money they do have.

As they have for the last seven years, this year they’ve been busy handing out money again.

Yahoo reveals more breachiness to users victimized by forged cookies

posted onFebruary 15, 2017
by l33tdawg

Yahoo has sent out another round of notifications to users, warning some that their accounts may have been breached as recently as last year. The accounts were affected by a flaw in Yahoo's mail service that allowed an attacker—most likely a "state actor," according to Yahoo—to use a forged "cookie" created by software stolen from within Yahoo's internal systems to gain access to user accounts without a password.

New Mac malware pinned on same Russian group blamed for election hacks

posted onFebruary 15, 2017
by l33tdawg

APT28, the Russian hacking group tied to last year's interference in the 2016 presidential election, has long been known for its advanced arsenal of tools for penetrating Windows, iOS, Android, and Linux devices. Now, researchers have uncovered an equally sophisticated malware package the group used to compromise Macs.

Man jailed 16 months, and counting, for refusing to decrypt hard drives

posted onFebruary 13, 2017
by l33tdawg

Francis Rawls, a former Philadelphia police sergeant, has been in the Philadelphia Federal Detention Center for more than 16 months. His crime: the fired police officer has been found in contempt of court for refusing a judge's order to unlock two hard drives the authorities believe contain child pornography. Theoretically, Rawls can remain jailed indefinitely until he complies.

As Valve eradicates serious bug in Steam, here’s what you need to know

posted onFebruary 7, 2017
by l33tdawg

Steam, an online game platform with more than 125 million active accounts, is in the process of fixing a serious security hole that opens users to hacks that could redirect them to attack sites, spend their market funds, or possibly make malicious changes to their user profiles.

Attackers Capitalizing on Unpatched WordPress Sites

posted onFebruary 7, 2017
by l33tdawg

Attackers didn’t wait long to capitalize on laggards slow in updating their WordPress sites to patch a critical content injection vulnerability addressed in WordPress 4.7.2.

The update was made public on Jan. 26 with WordPress disclosing six days later that the update also included a silent fix for an unauthenticated privilege escalation flaw in a REST API endpoint.