According to the news cyber criminals, nation states, and even our own employees are attacking our digital networks. In fact there's so much information security news each day, it's hard to keep up. If you find yourself falling behind, perhaps my weekly summary video can help. Today's episode covers, nation-state malware, booby-trapped popular web sites, dangerous pre-loaded … [Read more...]
NSA Hacks Hard Drives – Daily Security Byte EP.25
The latest advanced threat discovery uncovers nation state (possibly NSA) malware that overwrites hard drive firmware; making it extremely difficult to find or clean. Watch the video for more details. (Episode Runtime: 2:26) Direct YouTube Link: https://www.youtube.com/watch?v=nL39RZPvLS0 EPISODE REFERENCES: Kaspersky’s blog post on the Equation Group (EG) - Kaspersky More … [Read more...]
DarkHotel & iOS Masque – WSWiR Episode 129
MS Patch Day, DarkHotel, and iOS Masque Too much Information Security (InfoSec) news, too little time? I sometimes feel the same way. If you don't have time to keep up yourself, why not watch our weekly InfoSec video to catch the highlights. This week, I share the highlights from Microsoft Patch Day, talk about a targeted attack preying on executives in hotels, and warn of a … [Read more...]
UPDATE TO: Advanced Attackers Exploit IE 0day in the Wild
Severity: High Summary: This vulnerability affects: All versions of Internet Explorer (IE) How an attacker exploits it: By enticing a user to visit web site containing malicious content Impact: An attacker can execute code with your privileges, potentially gaining complete control of your computer What to do: Install Microsoft's emergency IE patch immediately, or let … [Read more...]
Advanced Attackers Exploit IE & Flash 0days in the Wild
Over the weekend, Microsoft released a critical security advisory warning customers of a serious new zero day vulnerability in Internet Explorer (IE), which attackers are exploiting in the wild. Around the same time, Kaspersky also noted an attack campaign leveraging a new Adobe Flash zero day flaw, which Adobe patched today. I'll discuss both issues below, starting with the IE … [Read more...]