This POODLE bites: exploiting the SSL 3.0 fallback

Tuesday, October 14th, 2014

Today we are publishing details of a vulnerability in the design of SSL version 3.0. This vulnerability allows the plaintext of secure connections to be calculated by a network attacker. I discovered this issue in collaboration with Thai Duong and Krzysztof Kotowicz (also Googlers). SSL 3.0 is nearly 15 years old, ...

The malware of the future may come bearing real gifts

Sunday, October 12th, 2014

“What,” asked the speaker. “if Notepad behaved just like you would expect it to, but only for the first hour or so that you used it? What if it began to do different things after that?” According to Giovanni Vigna, a professor at the University of California, Santa Barbara, and the ...

Windows 10 Preview Has A Keylogger to Watch Your Every Move

Saturday, October 4th, 2014

This week Microsoft announced the next version of its Operating system, dubbed Windows 10, providing Windows 10 Technical Preview release under its "Insider Program" in order to collect feedback from users and help shape the final version of the operating system, but something really went WRONG! “Inside Microsoft’s Insider Program you'll get all ...

Hackers Are Using Reddit to Connect 17,000 Macs to a Botnet

Saturday, October 4th, 2014

Bad news for Mac users: You're at risk for an insidious malware that will connect your computer to a botnet. Hackers have developed a backdoor entry called "Mac.BackDoor.iWorm" that gains access to Macs and uses Reddit to connect the hacked computer with a command server. Once the computer is infected, the ...

JPMorgan hack exposed data of 83 million, among biggest breaches in history

Saturday, October 4th, 2014

Names, addresses, phone numbers and email addresses of the holders of some 83 million households and small business accounts were exposed when computer systems at JPMorgan Chase & Co (JPM.N) were recently compromised by hackers, making it one of the biggest data breaches in history. The bank revealed the scope of ...