Zeljka Zorz
Flaw in Nvidia’s rendering software allows hijacking of “computer farms”
A vulnerability in Nvidia mental ray, an extremely popular 3D-rendering software that is often used on “render farms”, could allow attackers to take control of …
Facebook users hit with phishing and malware combo attack
An interesting phishing / malware delivery campaign has been spotted targeting Facebook users. It all starts with a message from a Facebook friend, claiming that the user or …
64-bit Zeus Trojan version found and analyzed
Infamous banking Trojan Zeus can now be used to steal information via 64-bit versions of web browsers, and has the capability of connecting to its C&C server via the Tor …
Flawed Android app devkit puts users in danger of MitM attacks
In this age of prevalently free software and services, it’s difficult to make users pay for apps, and especially so in the Android ecosystem. Consequently, mobile app …
NSA uses Google cookies to track and target suspects
Newly published documents from Edward Snowden’s trove show that the NSA and its British counterpart GCHQ use Google’s “preferences” cookies to follow …
Deplorable security flaws in Santander UK banking apps and site
When banks urge customers to use their mobile banking apps and sites for making online payments, users usually assume these methods are secure and do so. But Paul Moore, a …
Android malware places secret calls to premium rate numbers
A mobile malware family dubbed MouaBad by Lookout researchers has lately been plaguing Chinese users with older versions (3.1 and earlier) of Android. Variants of the malware …
Disqus security flaw used to deanonymize online commenters
A security flaw in the API of popular blog comment hosting service Disqus can be exploited to reveal the email addresses of users, and therefore occasionally even their …
FreeBSD ditches suspect hardware-based crypto
Buried in the “Security” section of a report on the FreeBSD Developer Summit held in September in Malta is a small but important note about the FreeBSD …
CyanogenMod introduces built-in SMS encryption
CyanogenMod developers have announced the fruit of several months of labor headed by Open Whisper Systems’ Moxie Marlinspike: a seamless implementation of TextSecure, …
New security features for Microsoft accounts
Microsoft has added three new security improvements to its customer accounts: account recovery codes, insight into recent account activity, and more control over security …
FBI used spying malware to track down terror suspect
Court documents related to a recent FBI investigation have revealed that the agency has been permitted to try to compromise with spying malware the computer of a potential …
Featured news
Resources
Don't miss
- CTM360 maps out real-time phishing infrastructure targeting corporate banking worldwide
- Malicious RVTools installer found on official site, researcher warns
- AI hallucinations and their risk to cybersecurity operations
- Why EU encryption policy needs technical and civil society input
- Hanko: Open-source authentication and user management