LATEST ARTICLES

Using Tor’s Hidden Services To Maximize the Security of Push Notification Services

Push notification, which is also referred to as server push notification, represent the process of delivery of data from a software app to a given computing device, without having to deal...

Talos Weekly Threat Report

This week's most prevalent threats are: 本周最受欢迎的威胁是: Pdf.Tool.HeapSprayHeuristic-6316003-1 JS Heap Spray PDFs leverage embedded JavaScript to exploit vulnerabilities or at the very least gain access to additional functionality provided by JavaScript. Typical exploitation techniques...

Dirty COW and why lying is bad even if you are the Linux kernel

Dirty COW (CVE-2016-5195) is one of the most publicised local privilege escalation vulnerabilities in 2016, courtesy to its catchy name, cute logo, potential damages, and the fact that it was discovered...

New Non-HTTPS Websites Blacklisted for Phishy Password Practices

We submit hundreds of blacklist review requests every day after cleaning our clients’ websites. Google’s Deceptive Content warning applies when Google detects dangerous code that attempts to trick users into revealing...
video

Google Boots 41 Apps Infected with “Judy” Malware off the Play Store

Google has removed 41 Android apps from the official Play Store. The apps were infected with a new type of malware named Judy, and experts estimate the malware infected between 8.5...

FileZilla FTP Client Adds Support for Master Password That Encrypts Your Logins

Following years of criticism and user requests, the FileZilla FTP client is finally adding support for a master password that will act as a key for storing FTP login credentials in...

Hackers alter stolen emails for clandestine attacks against Putin’s critics

This has become the era where the internet is widely used for the purpose of cyber reconnaissance/espionage/corruption by political parties. To put in layman’s terms, the political leg pulling, posturing and...

NSEarch – Nmap Scripting Engine Search

Nsearch, is a tool that helps you to find scripts that are used by nmap ( nse ) , you can search the scripts using differents keyword as the name, category...

CVE-2017-7494 Samba vulnerability, patch your installation now

A seven-year-old remote code execution vulnerability, tracked as CVE-2017-7494, affects all versions of the Samba software since 3.5.0. A seven-year-old remote code execution vulnerability affects all versions of the Samba software since...

Author of EternalRocks SMB Worm Calls It Quits After Intense Media Coverage

The developer of the EternalRocks SMB worm appears to have shut down his operation, following the intense media coverage his malware has received in the past seven days. EternalRocks SMB蠕虫的开发者似乎已经关闭了他的操作,在恶意软件在过去七天收到的激烈的媒体报道之后。 For people unaware...