|
Risk & Repeat: Shadow Brokers launch zero–day exploit service
TechTarget But the monthly service for zero–day exploits complicates matters for vulnerability disclosure; a group of security researchers attempted to crowdfund a subscription to the Shadow Brokers' service, but the effort was abandoned because of legal concerns. |
If you were running Windows 10, then you didn’t need to worry about your box being hit with the leaked NSA EternalBlue exploit; but things change and now researchers have ported EternalBlue to Windows 10.
After the WannaCry ransomware attack, some defenders focused on building detection rules to protect against the DoublePulsar backdoor implant; but beware as RiskSense researchers completely removed DoublePulsar. They warned that DoublePulsar is a “red herring for defenders to focus on, as stealthier payload mechanisms can be crafted.”
While they are not revealing all the details about the exploit chain so attackers can jump on them, they hope white hat security researchers benefit from the technical overview of the exploit process “so that new generic and targeted techniques can be developed to prevent attacks.”
To read this article in full or to leave a comment, please click here
ThaiVisa News |
Cloak & Dagger: New Android exploit lets hackers steal your passwords and wreak havoc on your device
ThaiVisa News We have updated Google Play Protect — our security services on all Android devices with Google Play — to detect and prevent the installation of these apps. Prior to this report, we had already built new security protections into Android O that will … |
SC Magazine |
Terror Exploit Kit ditches carpet bombing techniques; attacks now more surgical
SC Magazine The Terror Exploit Kit is rapidly evolving, no longer bombarding victims with multiple exploits in scattershot fashion, but rather applying only the hacking tools that work best against a specific compromised machine, according to research from Cisco's … |