Android bug allowing SOP bypass a ‘privacy disaster,’ researcher warns

Wednesday, September 17th, 2014

Researchers are warning Android users of a major vulnerability that impacts a vital browser security mechanism called Same-Origin Policy (SOP). The bug – called a “privacy disaster” by Tod Beardsley, an engineering manager at Rapid7 who blogged about the issue Monday – is serious because SOP, “the cornerstone of web privacy,” ...

More than 24M home routers enabling DNS amplification DDoS attacks

Thursday, April 3rd, 2014

Tens of millions of the home routers we rely on everyday for internet access are enabling Domain Name System (DNS) based distributed denial-of-service (DDoS) attacks, and owners may never even know it, according to research by DNS software provider Nominum. Working collaboratively with the Open Resolver Project, Nominum learned that open ...

United States to give up its oversight on domain name assignment

Sunday, March 16th, 2014

In the wake of an NSA spying scandal which has shaken the faith of many in the United States' dedication to digital privacy, the U.S government has announced that it will be ceding its oversight of ICANN - the organization which manages domain name assignment for every site on the internet. According ...

Unique malware evades sandboxes

Thursday, December 19th, 2013

On Wednesday, security vendor Seculert reported finding that one of five malware types used in the attack had a unique cloaking property for evading sandboxes. The company called the malware DGA.Changer. DGA.Changer's only purpose was to download other malware onto infected computers, Aviv Raff, chief technology officer for Seculert, said on ...

Popular humor site hosted Nuclear Pack exploit kit

Wednesday, November 13th, 2013

Cracked.com, a humor website that is among the 300 most popular sites in the U.S., may have left visitors a sobering surprise this week. According to Barracuda Labs, as of Sunday the website was compromised to host the Nuclear Pack exploit kit. Daniel Peck, principal research scientist on the security team at Barracuda Labs, ...