ThreatRavens.

Browsing category

Security threats

2-Factor Authentication, AWS, computer misuse act, Data loss, Law & order, rogue employees, Security threats,

Sacked IT guy annihilates 23 of his ex-employer’s AWS servers

He was fired after four weeks, ripped off the credentials of former colleague “Speedy”, and will be mulling it all over for two years in jail.

This post appeared first on Naked Security Blog by Sophos
Author: Lisa Vaas

March 22, 2019

2-Factor Authentication, BitLocker, Cryptography, Microsoft, Organisations, Security threats, tpm, Trusted Platform Modules, Vulnerability, Windows, Windows 10,

Researcher finds new way to sniff Windows BitLocker encryption keys

A researcher has published a new and relatively simple way that Windows BitLocker encryption keys can be sniffed in less secure configurations as they travel from Trusted Platform Modules (TPMs) during boot.

This post appeared first on Naked Security Blog by Sophos
Author: John E Dunn

March 21, 2019

cross-site scripting, deserialization, PHP, PHP library, Polict, rce, Remote code execution, Security threats, TCPDF, XSS,

Flaw in popular PDF creation library enabled remote code execution

A researcher has discovered a high-severity bug in a popular PHP library used for creating PDFs.

This post appeared first on Naked Security Blog by Sophos
Author: Danny Bradbury

March 21, 2019

booters, China, DDOS, DDoS-for-hire, Denial of Service, FBI, IoT, Lizard Squad, NexusGuard, Security threats, US,

FBI crackdown on DDoS-for-hire sites led to 85% slash in attack sizes

According to a new report, average and maximum DDoS attack sizes decreased by 85.36% and 23.91%.

This post appeared first on Naked Security Blog by Sophos
Author: Lisa Vaas

March 21, 2019

Elevation of Privileges issue, Google, google project Zero, Microsoft, Operating Systems, Organisations, Security threats, Vulnerability, Windows, Windows phone,

Google researcher discovers new type of Windows security weakness

Microsoft will patch a new Windows security bug discovered by Google Project Zero – despite finding no evidence that it poses a threat.

This post appeared first on Naked Security Blog by Sophos
Author: John E Dunn

March 20, 2019

black mirror, Data loss, JSON files, Netflix, Privacy, Security threats, SSL encryption,

Researchers fret over Netflix interactive TV traffic snooping

No sooner has Netflix made an interactive TV show than people are already pulling apart its privacy implications.

This post appeared first on Naked Security Blog by Sophos
Author: Danny Bradbury

March 20, 2019

Government security, hacked, hacking, Law & order, public warning system, Security threats,

Hacked tornado warning systems leave Texans in the dark

Add this latest public warning system sabotage to a growing list of fear-and-panic-spreading hacking incidents.

This post appeared first on Naked Security Blog by Sophos
Author: Lisa Vaas

March 20, 2019

Microsoft, Operating Systems, Organisations, patch, Registry Editor, Security threats, User Account Control, Vulnerability, Windows, Windows 10,

Microsoft won’t patch Windows registry warning problem

A security researcher has found a way to tinker with Windows’ core settings while persuading users to accept the changes.

This post appeared first on Naked Security Blog by Sophos
Author: Danny Bradbury

March 19, 2019

Data Privacy, data scraping, Epic Games, Fortnite, Privacy, Reddit, Security threats, Stream,

Epic in hot water over Steam-scraping code

Players noticed that Epic Games was gathering and storing data from Steam accounts without their permission.

This post appeared first on Naked Security Blog by Sophos
Author: Danny Bradbury

March 19, 2019

DARPA, e-vote machiines, e-voting, electronic polls, electronic voting, Government security, Security threats, US elections, voter fraud,

DARPA is working on an open source, secure e-voting system

The US Government is working on an electronic voting system that it hopes will prevent people from tinkering with voting machines at the polls.

This post appeared first on Naked Security Blog by Sophos
Author: Danny Bradbury

March 18, 2019

Older Posts