ComputerWorldIndependent

Hackers use old Stuxnet-related bug to carry out attacks

Credit to Author: Michael Kan| Date: Thu, 20 Apr 2017 13:57:00 -0700

Users that run unpatched software beware. Hackers have been relying on an old software bug tied to the Stuxnet worm to carry out their attacks.

Microsoft may have initially patched the flaw in 2010, but it’s nevertheless become the most widespread software exploit, according to security firm Kaspersky Lab.

On Thursday, Kaspersky posted research examining the use of exploits, or malicious programs designed to take advantage of certain software flaws. Once an exploit goes to work, it can typically pave the way for other malicious programs to install onto a computer.

To read this article in full or to leave a comment, please click here

Read More
ComputerWorldIndependent

Developer lifts Windows 7's update blockade with unsanctioned patch

Credit to Author: Gregg Keizer| Date: Thu, 20 Apr 2017 13:28:00 -0700

An anonymous developer has published a patch that negates Microsoft’s barring of security updates from Windows 7 and 8.1 PCs equipped with the very newest processors.

The developer, identified as “Zeffy,” posted the patch and accompanying documentation on GitHub, the code repository.

“I was inspired to look into these new rollup updates that Microsoft released on March 16 [after reading about the processor-related blocking of Windows Update],” wrote Zeffy. “[That was] essentially a giant middle finger to anyone who dare not ‘upgrade’ to the steaming pile of garbage known as Windows 10.”

To read this article in full or to leave a comment, please click here

Read More
IndependentSecuriteam

Security conferences – Survival guide 2017 Q3

Credit to Author: Maor Schwartz| Date: Thu, 20 Apr 2017 07:10:46 +0000

The security conferences “Survival guide” for 2017 Q3 is here! We have gathered the following information for you for each conference: Dates Place Link to official conference website Ticket price Lectures Workshops So let’s get started: Security conferences – Survival guide part 3 Camp++ Dates: 6 – 9 July 2017 Place: Fort Monostor, Komárom, Hungary … Continue reading Security conferences – Survival guide 2017 Q3

Read More
FortinetSecurity

Remote Password Change Vulnerability in HPE Vertica Analytic Database

Credit to Author: Honggang Ren| Date: Thu, 20 Apr 2017 13:30:06 -0700

Summary On March 24 2017, I discovered and reported on a remote password change vulnerability in Hewlett-Packard Enterprise’s (HPE) Vertica Analytic Database. This week, HPE released Security Bulletin HPESBGN03734, which contains the fix for this vulnerability and identifies it as CVE-2017-5802. Fueled by ever-growing volumes of Big Data found in many corporations and government agencies, HPE’s Vertica Analytics Platform provides an SQL analytics solution built from the ground up to handle massive volumes of data and delivers blazingly…

Read More
MalwareBytesSecurity

Binary Options malvertising campaign drops ISFB banking Trojan

Credit to Author: Jérôme Segura| Date: Thu, 20 Apr 2017 15:00:55 +0000

We take a look at a widespread and yet stealthy malvertising campaign distributing the ISFB banking Trojan via decoy websites.

Categories:

Tags:

(Read more…)

The post Binary Options malvertising campaign drops ISFB banking Trojan appeared first on Malwarebytes Labs.

Read More
MicrosoftSecurity

Combating a spate of Java malware with machine learning in real-time

Credit to Author: msft-mmpc| Date: Thu, 20 Apr 2017 13:02:00 +0000

In recent weeks, we have seen a surge in emails carrying fresh malicious Java (.jar) malware that use new techniques to evade antivirus protection. But with our research team’s automated expert systems and machine learning models, Windows 10 PCs get real-time protection against these latest threats. Attackers are constantly changing their methods and tools. We…

Read More