Security Experts:
Ionut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Recent articles by Ionut Arghire
-
A security vulnerability patched by Microsoft earlier this month in its Edge browser could be exploited via malicious or compromised websites to read restricted data.
-
A series of cyber-attacks have been using an encrypted downloader to deliver a Metasploit backdoor, AlienVault reports.
-
Network attacks exploiting a recently patched Drupal vulnerability are attempting to drop Monero mining malware onto vulnerable systems, Trend Micro reports.
-
The Red Alert 2.0 Android Trojan first detailed in September last year is currently available for rent on underground forums at $500 per month, Trustwave reports.
-
Cisco on Wednesday released patches for over 30 security vulnerabilities in its products, including Critical flaws impacting NX-OS Software.
-
Google this week announced it is adding a small amount of security metadata on top of APKs distributed by Google Play, to verify their authenticity.
-
Microsoft this week announced the public preview of new Azure tools that should help its customers eliminate easily guessable passwords from their environments.
-
The Quick Look mechanism on macOS, which allows users to check file contents without actually opening the files, may leak information on cached files, even if they reside on encrypted drives or if the files have been deleted.
-
Thousands of mobile applications running on iOS and Android have reportedly exposed over 113 gigabytes of data from 2,300 unsecured Firebase databases.
-
A Massachusetts man pleaded guilty to his role in an ATM “jackpotting” operation, the United States Department of Justice announced this week.
-
The author of a newly discovered malware downloader allows interested parties to set up a botshop and build a malware distribution network, Netscout Arbor reveals.
-
A newly discovered attack against Google Home and Chromecast devices can reveal a user’s precise physical location, a security researcher has discovered.
-
Endpoint security firm CrowdStrike has secured more than $200 million through a Series E round of financing, valuing the company at more than $3 billion.
-
A newly detailed Android remote access Trojan (RAT) is leveraging Telegram’s bot functionality to control infected devices, ESET reveals.
-
The Betabot Trojan is being spread in a multi-stage attack that starts with malicious Office documents attempting to exploit a 17-year old vulnerability.
-
A newly added “Endpoint Verification” feature in G Suite provides administrators with increased visibility into the computers that have access to corporate data.
-
Malware-laden Syscoin releases were up for download on an official GitHub repository after hackers managed to compromise an account and replace legitimate Windows installers.
-
The number of cyber-attacks targeting Singapore skyrocketed from June 11 to June 12, during the meeting between U.S. President Donald Trump and North Korean President Kim Jong-un in a Singapore hotel, and most of these attacks originated from Russia
-
Trend Micro analyzes new campaign that appears to be linked to MuddyWater espionage
-
Microsoft patches remote code execution vulnerability affecting the wimgapi library. The company and Cisco, whose researchers found the flaw, disagree on its severity
-
GnuPG recently addressed an input sanitization vulnerability where a remote attacker could spoof arbitrary signatures
-
One of the vulnerabilities patched by Microsoft this month was a flaw in Cortana that can allow an attacker to elevate privileges and execute code from the lock screen
-
New Android banking Trojan named MysteryBot, which researchers linked to LokiBot, leverages some interesting techniques for phishing and logging keystrokes
-
Cybercriminals continue to add new exploits, including for vulnerabilities that recently had a zero-day status, to exploit kits
-
Google this week detailed plans to completely remove the inline installation of Chrome extensions from its web browser by the end of the year
SecurityWeek Daily Briefing
- Oracle Patches New Spectre, Meltdown Vulnerabilities
- Tesla Breach: Malicious Insider Revenge or Whistleblowing?
- "Wavethrough" Bug in Microsoft Edge Leaks Sensitive Information
- New Encrypted Downloader Delivers Metasploit Backdoor
- Watch Out for Fileless Ransomware
- How to Shed the Security Operations Doldrums
- Hidden Tunnels: A Favored Tactic to Evade Strong Access Controls
- Hackers Exploit Drupal Flaw for Monero Mining
- Red Alert Android Trojan for Rent at $500 Per Month
- Cisco Patches Critical Flaws in NX-OS Software
Copyright © 2018 Wired Business Media. All Rights Reserved. Privacy Policy