PROJET AUTOBLOG


The Hacker News

Site original : The Hacker News

⇐ retour index

Security Flaw Left Major Banking Apps Vulnerable to MiTM Attacks Over SSL

jeudi 7 décembre 2017 à 18:01
A team of security researchers has discovered a critical implementation flaw in major mobile banking applications that left banking credentials of millions of users vulnerable to hackers. The vulnerability was discovered by researchers of the Security and Privacy Group at the University of Birmingham, who tested hundreds of different banking apps—both iOS and Android—and found that several of

Process Doppelgänging: New Malware Evasion Technique Works On All Windows Versions

jeudi 7 décembre 2017 à 12:52
A team of security researchers has discovered a new malware evasion technique that could help malware authors defeat most of the modern antivirus solutions and forensic tools. Dubbed Process Doppelgänging, the new fileless code injection technique takes advantage of a built-in Windows function and an undocumented implementation of Windows process loader. Ensilo security researchers Tal

Largest Crypto-Mining Exchange Hacked; Over $70 Million in Bitcoin Stolen

jeudi 7 décembre 2017 à 10:28
Bitcoin is breaking every record—after gaining 20% jump last week, Bitcoin price just crossed the $14,800 mark in less than 24 hours—and there can be no better reason for hackers to put all of their efforts to steal skyrocketing cryptocurrency. NiceHash, the largest Bitcoin mining marketplace, has been hacked, which resulted in the theft of more than 4,700 Bitcoins worth over $57 million (at

Uber Paid 20-Year-Old Florida Hacker $100,000 to Keep Data Breach Secret

jeudi 7 décembre 2017 à 08:49
Last year, Uber received an email from an anonymous person demanding money in exchange for the stolen user database. It turns out that a 20-year-old Florida man, with the help of another, breached Uber's system last year and was paid a huge amount by the company to destroy the data and keep the incident secret. Just last week, Uber announced that a massive data breach in October 2016 exposed

Critical Flaw in Major Android Tools Targets Developers and Reverse Engineers

mercredi 6 décembre 2017 à 12:54
Finally, here we have a vulnerability that targets Android developers and reverse engineers, instead of app users. Security researchers have discovered an easily-exploitable vulnerability in Android application developer tools, both downloadable and cloud-based, that could allow attackers to steal files and execute malicious code on vulnerable systems remotely. The issue was discovered by