Serious Samba Flaw Threatens Networks
There is a severe, remotely exploitable vulnerability in many versions of the Samba software that has been siting unnoticed for seven years. The vulnerability is trivial to exploit and there is proof-of-concept exploit code available for it, making it even more dangerous. The Samba maintainers have released a patch for the flaw, and researchers are warning customer […]
Decryption Tools Help Turn Tide Against WannaCry
As the WannaCry ransomware campaign stretches on into its second week, researchers have had more and more success developing tools to help users decrypt the files on infected PCs. Last week, French researcher Adrien Guinet released a tool called Wannakey that could recover the private keys used to encrypt files on Windows XP machines. The […]
WannaCry is the Future of Ransomware
We knew this was coming. We’ve known for years that a ransomware attack on the scale of WannaCry was not just possible, but probable. What we didn’t know was that when it came it would involve a vulnerability discovered by the NSA, an exploit developed by the NSA, and a backdoor written by the NSA. […]
Experts: WannaCry Kill Switches Just a Temporary Fix
While security researchers have had some success in preventing the WannaCry ransomware campaign from becoming a true epidemic with the use of kill switches hidden in the malware’s code, experts say those are just temporary solutions that may not last much longer. The two versions of WannaCry that have emerged so far each have included […]
Major Ransomware Attack Sweeps Europe
UPDATE–Attackers have hit several hospitals in the UK, along with major corporations in Spain and other countries with a ransomware attack, disrupting network and phone operations and forcing some of the hospitals to postpone non-emergency services and divert patients to other facilities. The attack, initially detected at hospitals and other medical facilities in the UK […]
Notorious Snake Malware Set to Target OS X
Researchers have discovered a version of the infamous Snake cyber espionage tool used by Russian-speaking attackers that is designed to infect Macs. Snake, also known as Turla, is a sophisticated piece of malware that’s been used for several years by an APT group linked to Russia. The attackers have targeted government agencies and other victims in […]
IBM Says It Shipped Malware-Infected USB Drives
IBM shipped USB flash drives containing malware to an unknown number of customers. The company said the malware is automatically copied to any machine that the drive is connected to, and is warning customers to destroy the drives. IBM hasn’t released many details on the incident or how the malware got onto the drives. But […]
Intel Patches Ancient Critical Processor Bug
Intel has released a fix for a vulnerability that’s been sitting undiscovered in the firmware for some of its processors for nearly a decade. The vulnerability could allow an attacker to run arbitrary code on affected machines. The newly patched bug is found in the firmware for some of the processors Intel makes for business-class […]
Verizon: Ransomware, Cyberespionage Attacks On the Rise
Ransomware attacks are becoming a larger and larger problem for enterprises, now accounting for nearly 75 percent of malware-related incidents in health care companies, according to new data released by Verizon. The ransomware issue has been a major concern for many companies for several years now, but it has become especially acute for health care companies. […]