Wednesday, August 14, 2019

HTTP/2, Brute! Then fall, server. Admin! Ops! The server is dead

Beware the denials of service: Netflix warns of eight networking bugs

On Tuesday, Netflix, working in conjunction with Google and CERT/CC, published a security advisory covering a series of vulnerabilities that enable denial of service attacks against servers running HTTP/2 services.…

The Register – Security
Secure Hunter Anti -Malware

The post HTTP/2, Brute! Then fall, server. Admin! Ops! The server is dead appeared first on Secure Hunter Anti-Malware.



https://ift.tt/2MjfQX8
Secure Hunter

Tuesday, August 13, 2019

Header aches in Firefox, Tor, Brave and Chrome as HTTP opens new security holes

Alternative Services spec bungled by browser makers

The HTTP Alternative Services header can be abused to conduct network reconnaissance and attacks, to bypass malware protection services, and to foil tracking defenses and privacy assumptions, according to a paper scheduled to be presented at the WOOT ’19 security conference on Tuesday.…

The Register – Security
Secure Hunter Anti -Malware

The post Header aches in Firefox, Tor, Brave and Chrome as HTTP opens new security holes appeared first on Secure Hunter Anti-Malware.



https://ift.tt/2H42t94
Secure Hunter

Monday, August 12, 2019

I could throttle you right about now: US Navy to ditch touchscreens after kit blamed for collision

Thousands of tons of metal and iPads don’t mix, it would seem

The US Navy is ditching touchscreens and going back to physical throttles after an investigation into the USS John S McCain collision partly blamed poor design of control systems for the incident.…

The Register – Security
Secure Hunter Anti -Malware

The post I could throttle you right about now: US Navy to ditch touchscreens after kit blamed for collision appeared first on Secure Hunter Anti-Malware.



https://ift.tt/2YJXCET
Secure Hunter

Sunday, August 11, 2019

SELECT code_execution FROM * USING SQLite: Eggheads lift the lid on DB security hi-jinks

You’ve heard of ROP? Now get a load of QOP

DEF CON  At the DEF CON hacking conference in Las Vegas on Saturday, infosec gurus from Check Point are scheduled to describe a technique for exploiting SQLite, a database used in applications across every major desktop and mobile operating system, to gain arbitrary code execution.…

The Register – Security
Secure Hunter Anti -Malware

The post SELECT code_execution FROM * USING SQLite: Eggheads lift the lid on DB security hi-jinks appeared first on Secure Hunter Anti-Malware.



https://ift.tt/2YGzvHf
Secure Hunter

Saturday, August 10, 2019

Anatomy of an attack: How Coinbase was targeted with emails booby-trapped with Firefox zero-days

Elaborate browser break-out betrayed by unusual behavior

Coinbase chief information security officer Philip Martin this week published an incident report covering the recent attack on the cryptocurrency exchange, revealing a phishing campaign of surprising sophistication.…

The Register – Security
Secure Hunter Anti -Malware

The post Anatomy of an attack: How Coinbase was targeted with emails booby-trapped with Firefox zero-days appeared first on Secure Hunter Anti-Malware.



https://ift.tt/2YEJi08
Secure Hunter

Friday, August 9, 2019

Talk about unintended consequences: GDPR is an identity thief’s dream ticket to Europeans’ data

Revenge plan morphs into data leak discovery

Black Hat  When Europe introduced the General Data Protection Regulation (GDPR) it was supposed to be a major step forward in data safety, but sloppy implementation and a little social engineering can make it heaven for identity thieves.…

The Register – Security
Secure Hunter Anti -Malware

The post Talk about unintended consequences: GDPR is an identity thief’s dream ticket to Europeans’ data appeared first on Secure Hunter Anti-Malware.



https://ift.tt/2YTAUJv
Secure Hunter

Thursday, August 8, 2019

WTF is Boeing on? Not just customer databases lying around on the web. 787 jetliner code, too, security bugs and all

Fears of cyber-hijackings? That’s plane crazy, says Dreamliner maker

Black Hat  A Black Hat presentation on how to potentially hijack a 787 – by exploiting bugs found in internal code left lying around on a public-facing server – was last night slammed as “irresponsible and misleading” by Boeing.…

The Register – Security
Secure Hunter Anti -Malware

The post WTF is Boeing on? Not just customer databases lying around on the web. 787 jetliner code, too, security bugs and all appeared first on Secure Hunter Anti-Malware.



https://ift.tt/2YwmHD7
Secure Hunter