exploit

Angler exploit kit and domain shadowing: A deadly combination

March 5, 2015

Attackers wielding the infamous Angler exploit kit are increasingly using hijacked registrant accounts to create huge amounts of subdomains for both redirecting victims and …

Compromised cPanel “Account Suspended” pages redirect to exploit kit

February 27, 2015

All Internet users have, at least once in their lives, seen the following “Account Suspended” page: That’s because it’s part and parcel of cPanel, one …

Researchers create automated signature compiler for exploit detection

February 25, 2015

A trio of researchers from Microsoft and University of Erlangen-Nuremberg have created Kizzle, a compiler for generating signatures for detecting exploit kits delivering …

Pwn2Own 2015: New rules, prizes, and potential problems

February 17, 2015

If you intend to participate in the Pwn2Own competition at the CanSecWest 2015 conference on March 18 and 19 in Vancouver, Canada, you would do well to consult with a legal …

Google Play flaw opens Android devices to silent malware installation

February 11, 2015

Android users are in danger of getting malicious apps silently installed on their devices by attackers, warns Rapid7’s Tod Beardsley, technical lead for the Metasploit …

Forbes.com compromised by Chinese cyber spies targeting US firms

February 11, 2015

Forbes.com – the 61st most popular website in the US according to Alexa – has been compromised to redirect certain visitors to websites delivering espionage …

League of Legends exploit allows attackers to access gamers’ accounts

February 3, 2015

A string of hacks has revealed the existence of an exploit targeting League of Legends players, which allows the attackers to open up the game’s store from a web browser …

Adobe updates Flash Player again, plugs 0-day exploited by Angler

January 26, 2015

Adobe made good on its promise to make available by this week a fix for the recently discovered critical zero-day Flash Player vulnerability (CVE-2015-0311) preyed on by the …

Critical Flash Player hole plugged, another still unpatched and exploited

January 23, 2015

Adobe has released an out-of-band update for Flash Player, which fixes a security flaw (CVE-2015-0310) that could be used to circumvent memory randomization mitigations on the …

Critical flaw on over 12M routers allows device hijacking, network compromise

December 19, 2014

A critical, easy to exploit vulnerability that opens more than 12 million SOHO routers around the world to remote compromise has been discovered by Check Point researchers. …

Two newcomers in the exploit kit market

December 15, 2014

Exploit kits are a great means to an end for malware distributors, who either buy them or rent them in order to widely disseminate their malicious wares. It’s no wonder …

Hikvision DVRs sporting bugs that allow device hijacking

November 21, 2014

A while back, SANS ISC CTO Johannes Ullrich discovered that cybercrooks were targeting Hikvision Digital Video Recorders (DVRs) in order to infect them with bitcoin-mining …