Hacker News
- XCSSET Mac Malware infects Xcode projects, performs UXSS attack on browsers https://blog.trendmicro.com/trendlabs-security-intelligence/xcsset-mac-malware-infects-xcode-projects-performs-uxss-attack-on-safari-other-browsers-leverages-zero-day-exploits/ 53 comments
- GDPR vs. Blockchain: Technology vs. The Law https://blog.trendmicro.com/gdpr-vs-blockchain-technology-vs-the-law/ 67 comments
- Hacking Team Uses UEFI BiOS Rootkit to Keep RCS 9 Agent in Target Systems http://blog.trendmicro.com/trendlabs-security-intelligence/hacking-team-uses-uefi-bios-rootkit-to-keep-rcs-9-agent-in-target-systems/ 60 comments
Lobsters
- Let's Encrypt Now Being Abused By Malvertisers http://blog.trendmicro.com/trendlabs-security-intelligence/lets-encrypt-now-being-abused-by-malvertisers/ 13 comments practices , security
- An In-Depth Technical Analysis of CurveBall (CVE-2020-0601) https://blog.trendmicro.com/trendlabs-security-intelligence/an-in-depth-technical-analysis-of-curveball-cve-2020-0601/ 5 comments netsec
- Skidmap Linux Malware Uses Rootkit Capabilities to Hide Cryptocurrency-Mining Payload https://blog.trendmicro.com/trendlabs-security-intelligence/skidmap-linux-malware-uses-rootkit-capabilities-to-hide-cryptocurrency-mining-payload/ 5 comments linux
- Adware Disguised as Game, TV, Remote Control Apps Infect 9 Million Google Play Users https://blog.trendmicro.com/trendlabs-security-intelligence/adware-disguised-as-game-tv-remote-control-apps-infect-9-million-google-play-users/ 3 comments technology
- Various Google Play ‘Beauty Camera’ Apps Send Users Pornographic Content, Redirect Them to Phishing Websites and Collect Their Pictures https://blog.trendmicro.com/trendlabs-security-intelligence/various-google-play-beauty-camera-apps-sends-users-pornographic-content-redirects-them-to-phishing-websites-and-collects-their-pictures/ 16 comments netsec
- Cybercriminals Use Malicious Memes that Communicate with Malware https://blog.trendmicro.com/trendlabs-security-intelligence/cybercriminals-use-malicious-memes-that-communicate-with-malware/ 14 comments netsec
- Cybercriminals Use Malicious Memes that Communicate with Malware https://blog.trendmicro.com/trendlabs-security-intelligence/cybercriminals-use-malicious-memes-that-communicate-with-malware/ 3 comments nottheonion
- Cryptocurrency Mining Malware uses Various Evasion Techniques, Including Windows Installer, as Part of its Routine https://blog.trendmicro.com/trendlabs-security-intelligence/cryptocurrency-mining-malware-uses-various-evasion-techniques-including-windows-installer-as-part-of-its-routine/ 12 comments netsec
- Fake Banking App Found on Google Play Used in SMiShing Scheme https://blog.trendmicro.com/trendlabs-security-intelligence/fake-banking-app-found-on-google-play-used-in-smishing-scheme/ 3 comments netsec
- Trickbot Shows Off New Trick: Password Grabber Module https://blog.trendmicro.com/trendlabs-security-intelligence/trickbot-shows-off-new-trick-password-grabber-module/ 10 comments netsec
- Phishing Campaign uses Hijacked Emails to Deliver URSNIF by Replying to Ongoing Threads https://blog.trendmicro.com/trendlabs-security-intelligence/phishing-campaign-uses-hijacked-emails-to-deliver-ursnif-by-replying-to-ongoing-threads/ 3 comments netsec
- Open ADB Ports Being Exploited to Spread Possible Satori Variant in Android Devices https://blog.trendmicro.com/trendlabs-security-intelligence/open-adb-ports-being-exploited-to-spread-possible-satori-variant-in-android-devices/ 9 comments netsec
- New MacOS Backdoor Linked to OceanLotus Found https://blog.trendmicro.com/trendlabs-security-intelligence/new-macos-backdoor-linked-to-oceanlotus-found/ 27 comments apple
- Dnsmasq: A Reality Check and Remediation Practices - TrendLabs Security Intelligence Blog https://blog.trendmicro.com/trendlabs-security-intelligence/dnsmasq-reality-check-remediation-practices/ 9 comments linux
- systemd Vulnerability Leads to Denial of Service on Linux (CVE-2017-15908) http://blog.trendmicro.com/trendlabs-security-intelligence/systemd-vulnerability-leads-to-denial-of-service-on-linux/ 81 comments netsec
- A Look at JS_POWMET, a Completely Fileless Malware http://blog.trendmicro.com/trendlabs-security-intelligence/look-js_powmet-completely-fileless-malware/?utm_source=feedburner&utm_medium=feed&utm_campaign=feed%3A+anti-malwareblog+%28trendlabs+security+intelligence+blog%29 23 comments netsec
- Researchers discover malware that activates when user hovers mouse over links and images in MS PowerPoint docs. It's built to steal credentials like banking info, and is capable of persistence, remote access, network traffic monitoring, and browser manipulation. http://blog.trendmicro.com/trendlabs-security-intelligence/mouseover-otlard-gootkit/ 3 comments technology
- IIS 6.0 Vulnerability Leads to Code Execution http://blog.trendmicro.com/trendlabs-security-intelligence/iis-6-0-vulnerability-leads-code-execution/ 4 comments netsec
- Pokemon-themed Umbreon Linux Rootkit Hits x86, ARM Systems - TrendLabs Security Intelligence Blog http://blog.trendmicro.com/trendlabs-security-intelligence/pokemon-themed-umbreon-linux-rootkit-hits-x86-arm-systems/ 3 comments linux
- Pokémon-themed Umbreon Linux Rootkit Hits x86, ARM Systems http://blog.trendmicro.com/trendlabs-security-intelligence/pokemon-themed-umbreon-linux-rootkit-hits-x86-arm-systems/ 16 comments netsec
- Let Me Get That Door for You: Remote Root Vulnerability in HID Door Controllers http://blog.trendmicro.com/let-get-door-remote-root-vulnerability-hid-door-controllers/ 7 comments netsec
- This is why we can't have nice things. Let’s Encrypt Now Being Abused By Malvertisers http://blog.trendmicro.com/trendlabs-security-intelligence/lets-encrypt-now-being-abused-by-malvertisers/ 30 comments linux
- Trend Micro Analysis of Latest Flash Exploit http://blog.trendmicro.com/trendlabs-security-intelligence/latest-flash-exploit-used-in-pawn-storm-circumvents-mitigation-techniques/ 4 comments netsec
- New Adobe Flash Zero-Day Used in Pawn Storm Campaign - latest patch affected http://blog.trendmicro.com/trendlabs-security-intelligence/new-adobe-flash-zero-day-used-in-pawn-storm-campaign/ 47 comments netsec
- New Adobe Flash Zero-Day Used in Pawn Storm Campaign Targeting Foreign Affairs Ministries http://blog.trendmicro.com/trendlabs-security-intelligence/new-adobe-flash-zero-day-used-in-pawn-storm-campaign/ 16 comments sysadmin
- Flash Threats - Not Just In the Browser http://blog.trendmicro.com/trendlabs-security-intelligence/flash-threats-not-just-in-the-browser/ 11 comments sysadmin
- Android MediaServer Bug Traps Phones in Endless Reboots http://blog.trendmicro.com/trendlabs-security-intelligence/android-mediaserver-bug-traps-phones-in-endless-reboots/ 6 comments netsec
- Trend Micro Discovers Vulnerability That Renders Android Devices Silent http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-vulnerability-that-renders-android-devices-silent/ 10 comments netsec
- 'Hacking Team' created a rootkit that can infect UEFI and stay on a victim's computer even if you replace your harddrive http://blog.trendmicro.com/trendlabs-security-intelligence/hacking-team-uses-uefi-bios-rootkit-to-keep-rcs-9-agent-in-target-systems/ 4 comments technology
- Exploring Control Flow Guard in Windows 10 http://blog.trendmicro.com/trendlabs-security-intelligence/exploring-control-flow-guard-in-windows-10/ 11 comments netsec
- Pawn Storm Update: iOS Espionage App Found http://blog.trendmicro.com/trendlabs-security-intelligence/pawn-storm-update-ios-espionage-app-found/ 17 comments netsec
- A Killer Combo: Critical Vulnerability and 'Godmode' Exploitation on CVE-2014-6332 http://blog.trendmicro.com/trendlabs-security-intelligence/a-killer-combo-critical-vulnerability-and-godmode-exploitation-on-cve-2014-6332/ 17 comments netsec
- Glacier Backup for SBS http://blog.trendmicro.com/trendlabs-security-intelligence/world-backup-day-the-3-2-1-rule/ 3 comments sysadmin
- Finding Holes in Banking Security: Operation Emmental. Cybercriminals have found a way to defeat a two-factor authentication method for bank accounts, by intercepting text messages containing session tokens. http://blog.trendmicro.com/trendlabs-security-intelligence/finding-holes-operation-emmental/ 3 comments technology
- HTML5 - The Ugly http://blog.trendmicro.com/html5-the-ugly/ 3 comments netsec
- Apple's AV signatures for MacDefender malware are string matches http://blog.trendmicro.com/what%E2%80%99s-in-apple-security-update-2011-03 8 comments netsec
- Trend Micro on new Adobe Reader zero-day [Non- Linkjack] http://blog.trendmicro.com/new-adobe-zero-day-exploit/ 11 comments netsec