RSS Reader for Computer Security Articles
Credit to Author: Lily Hay Newman| Date: Thu, 02 Mar 2017 22:29:42 +0000
A vulnerability in Slack left every account potentially exposed. Thank goodness the caught it in time. The post Hack Brief: A Slack Bug Could Have Been Everyone’s Worst Office Nightmare appeared first on WIRED.
Read More
Credit to Author: Michael Kan| Date: Thu, 02 Mar 2017 12:36:00 -0800
One bug in Slack, the popular work chat application, was enough for a security researcher to design a hack that could trick users into handing over access to their accounts.
Bug bounty hunter Frans Rosen noticed he could steal Slack access tokens to user accounts due to a flaw in the way the application communicates data in an internet browser.
“Slack missed an important step when using a technology called postMessage,” Rosen said on Wednesday in an email.
PostMessage is a kind of command that can let separate browser windows communicate with each other. In Slack, it’s used whenever the chat application opens a new window to enable a voice call.
To read this article in full or to leave a comment, please click here
Credit to Author: Lucian Constantin| Date: Thu, 02 Mar 2017 12:24:00 -0800
Computer users who have been affected by the Dharma ransomware and have held onto their encrypted files can now restore them for free. Researchers have created decryption tools for this ransomware strain after someone recently leaked the decryption keys.
Dharma first appeared in November and is based on an older ransomware program known as Crysis. It’s easy to recognize files affected by it because they will have the extension: .[email_address].dharma, where the email address is the one used by the attacker as a point of contact.
On Wednesday, a user named gektar published a link to a Pastebin post on the BleepingComputer.com technical support forum. The post, he claimed, contained the decryption keys for all Dharma variants.
To read this article in full or to leave a comment, please click here
Credit to Author: Christopher Boyd| Date: Thu, 02 Mar 2017 19:09:02 +0000
 | |
| If you’re registered on the Coachella website, you may have been swept up in a data breach hawking user details for sale on the Dark Web… Categories: Tags: Beyoncebreachcoachelladata breachphishphishing |
The post Coachella-gate: fire in the disco appeared first on Malwarebytes Labs.
Read More
Matt Gangwer, CTO of Rook Security and Ryan O'Leary, VP of Threat Research Center and Tech Support at WhiteHat Security join CSO Online's Steve Ragan to talk about the evolution of ransomware, and what companies need to do to combat it.
Credit to Author: Christopher Boyd| Date: Thu, 02 Mar 2017 16:00:57 +0000
 | |
| We look at a myGov phish which has been doing the rounds recently. There’s even some peculiar antics going on late into the phish – shall we take a look? Categories: Tags: bankbankingmyGovphishphishingscam |
The post Australians beware: myGov phishing on the prowl appeared first on Malwarebytes Labs.
Read MoreCredit to Author: Lily Hay Newman| Date: Thu, 02 Mar 2017 15:30:38 +0000
More internet-connected medical devices flood into healthcare industry every day, but we’re not moving fast enough to defend them. The post Medical Devices Are the Next Security Nightmare appeared first on WIRED.
Read MoreCredit to Author: Anthony Giandomenico| Date: Thu, 02 Mar 2017 07:45:18 -0800
For the enterprise, we recommend a three phase approach to security based around learning what is on your network, dividing the network into separated segments, and then implementing appropriate security that provides critical protections without compromising functionality and interoperability.
Read More