Apple's iMessage Exposes User IP Address and Device Details to Spammers
http://news.softpedia.com/news/apple-s-imessage-exposes-user-ip-address-and-device-details-to-spammers-508948.shtml
http://news.softpedia.com/news/apple-s-imessage-exposes-user-ip-address-and-device-details-to-spammers-508948.shtml
softpedia
Apple's iMessage Exposes User IP Address and Device Details to Spammers
iMessage link preview feature was added in iOS 10 and macOS 10.12, and currently can't be turned off
Mac Malware Can Abuse Legitimate Apps to Spy on Users | SecurityWeek.Com
http://www.securityweek.com/mac-malware-can-abuse-legitimate-apps-spy-users
http://www.securityweek.com/mac-malware-can-abuse-legitimate-apps-spy-users
SecurityWeek
Security Week Home
Cybersecurity News, Insights & Analysis
You Can Get Busted For Allegedly Running Fake Dark Web Markets | Motherboard
http://motherboard.vice.com/read/fbi-busts-alleged-dark-web-scammer
http://motherboard.vice.com/read/fbi-busts-alleged-dark-web-scammer
Motherboard
You Can Get Busted For Allegedly Running Fake Dark Web Markets
Who will help people who get scammed on the dark web? The FBI, apparently.
Facebook's un-Liked ~900 security flaws in five years • The Register
http://m.theregister.co.uk/2016/10/14/facebook_bug_bounty_squashes_900_falws/
http://m.theregister.co.uk/2016/10/14/facebook_bug_bounty_squashes_900_falws/
Attackers Use Recent BIND Flaw to Exploit DNS Servers
http://news.softpedia.com/news/attackers-use-recent-bind-flaw-to-attack-dns-servers-509315.shtml
http://news.softpedia.com/news/attackers-use-recent-bind-flaw-to-attack-dns-servers-509315.shtml
softpedia
Attackers Use Recent BIND Flaw to Exploit DNS Servers
Week-old security flaw deployed in live attacks
Google Receives Increasing Number of Government Requests | SecurityWeek.Com
http://www.securityweek.com/google-receives-increasing-number-government-requests
http://www.securityweek.com/google-receives-increasing-number-government-requests
SecurityWeek
Security Week Home
Cybersecurity News, Insights & Analysis
Quickly audit and adjust SSH server configurations with SSH-audit - Help Net Security
https://www.helpnetsecurity.com/2016/10/14/ssh-audit-fix-ssh-server-configurations/
https://www.helpnetsecurity.com/2016/10/14/ssh-audit-fix-ssh-server-configurations/
Help Net Security
Quickly audit and adjust SSH server configurations with SSH-audit - Help Net Security
SSH-audit supports OpenSSH, Dropbear SSH and libssh, and reports on every detail of the tested server, including used algorithms and security related info.
ShadowBrokers put US$6m price tag on new hoard of NSA hacks • The Register
http://m.theregister.co.uk/2016/10/17/nsa_hackers_want_6_million_for_remaining_exploits_and_hack_tools/
http://m.theregister.co.uk/2016/10/17/nsa_hackers_want_6_million_for_remaining_exploits_and_hack_tools/
Researchers Bypass ASLR via Hardware Vulnerability | SecurityWeek.Com
http://www.securityweek.com/researchers-bypass-aslr-hardware-vulnerability
http://www.securityweek.com/researchers-bypass-aslr-hardware-vulnerability
SecurityWeek
Security Week Home
Cybersecurity News, Insights & Analysis
“Most serious” Linux privilege-escalation bug ever is under active exploit (updated) | Ars Technica
http://arstechnica.com/security/2016/10/most-serious-linux-privilege-escalation-bug-ever-is-under-active-exploit/
http://arstechnica.com/security/2016/10/most-serious-linux-privilege-escalation-bug-ever-is-under-active-exploit/
Ars Technica
“Most serious” Linux privilege-escalation bug ever is under active exploit (updated)
Lurking in the kernel for nine years, flaw gives untrusted users unfettered root access.
Pakistan Government Officials Targeted with RATs in Cyber-Espionage Campaign
http://news.softpedia.com/news/pakistan-government-officials-targeted-with-rats-in-cyber-espionage-campaign-509529.shtml
http://news.softpedia.com/news/pakistan-government-officials-targeted-with-rats-in-cyber-espionage-campaign-509529.shtml
softpedia
Pakistan Government Officials Targeted with RATs in Cyber-Espionage Campaign
No clues on the attackers' identity as of yet
GM Bot Banking Trojan Can Now Bypass Android 6 Security Defenses
http://news.softpedia.com/news/gm-bot-banking-trojan-can-now-bypass-android-6-security-defenses-509600.shtml
http://news.softpedia.com/news/gm-bot-banking-trojan-can-now-bypass-android-6-security-defenses-509600.shtml
softpedia
GM Bot Banking Trojan Can Now Bypass Android 6 Security Defenses
New GM Bot Android banking trojan version discovered
Major Security Vulnerability Found In Schneider Electric ICS Gear | Threatpost | The first stop for security news
https://threatpost.com/major-vulnerability-found-in-schneider-electric-unity-pro/121550/
https://threatpost.com/major-vulnerability-found-in-schneider-electric-unity-pro/121550/
Threatpost
Major Vulnerability Found In Schneider Electric Unity Pro
Researchers find a vulnerability in industrial control system manufacturer Schneider Electric’s flagship software for managing and programing industrial controls.
Alleged ISIS member 'wore USB cufflink and trained terrorists in encryption' • The Register
http://m.theregister.co.uk/2016/10/28/samata_ullah_terror_trial_blog_crypto_usb_cufflink/
http://m.theregister.co.uk/2016/10/28/samata_ullah_terror_trial_blog_crypto_usb_cufflink/
Google to Make Certificate Transparency Mandatory By 2017 | Threatpost | The first stop for security news
https://threatpost.com/google-to-make-certificate-transparency-mandatory-by-2017/121651/
https://threatpost.com/google-to-make-certificate-transparency-mandatory-by-2017/121651/
Threatpost
Google to Make Certificate Transparency Mandatory By 2017
In a move to bolster security for the Chrome browser, Google sets a date for making Certificate Transparency mandatory for website owners.
Docker user? Haven't patched Dirty COW yet? Bad news … • The Register
http://m.theregister.co.uk/2016/11/01/docker_user_havent_patched_dirty_cow_yet_bad_news/
http://m.theregister.co.uk/2016/11/01/docker_user_havent_patched_dirty_cow_yet_bad_news/
Inside Anonymous’ ‘Civil War’ Over Its Fight With ISIS | Motherboard
http://motherboard.vice.com/read/inside-anonymous-civil-war-over-its-fight-with-isis?utm_source=mbtwitter
http://motherboard.vice.com/read/inside-anonymous-civil-war-over-its-fight-with-isis?utm_source=mbtwitter
Vice
Inside Anonymous’ ‘Civil War’ Over Its Fight With ISIS
How badly is Anonymous divided over its online war on ISIS?
Computer forensics defuses FBI's claimed Clinton email 'bombshell' • The Register
http://m.theregister.co.uk/2016/11/04/maths_defuses_clinton_fbi_mega_bombshell_claim/
http://m.theregister.co.uk/2016/11/04/maths_defuses_clinton_fbi_mega_bombshell_claim/