By now, you've probably heard more than you ever wanted to hear about the critical Intel security flaw known as "Spectre." The flaw is massive in scope and scale, impacting every chip that Intel has released over the past decade, and if exploited, would allow a hacker to take complete control over the vulnerable system. Needless to say, once discovered, the company got to work right away on a fix for the issue. Unfortunately, there were problems. Whatever form the fix ultimately took, it … Read more
Google Calls Out Microsoft For Security Issue
Depending on who you ask, Google's Project Zero is either the thing that's going to singlehandedly save the internet, or the bane of many companies' existence. It's easy to see both sides of the argument. On one hand, by uncovering previously undiscovered bugs in all manner of software and handing that information over to the authors, Google is undeniably performing a valued public service. The problem has never been with the "carrot" side of the equation, always with the stick. The … Read more
Android Ransomware Infections Declined in 2017
Android users have a reason to cheer. According to the latest report by ESET, the number of ransomware attacks targeting Android devices declined in 2017. The decline represents a bit of an anomaly, given that in 2017, the most common type of malware attack (by a wide margin) was ransomware. Given that security researchers can't name a particular reason for the decline, it's important not to read too much into the data. Whether there are declining figures or not, ransomware attacks still … Read more
New Apple Update Available for Character Bug Solution
Recently, another "exotic character" bug was found in iOS. If someone sends this particular character (a special character that's part of the Indian language pack) to your phone via any messaging app, it will not only crash your phone, but cause a variety of messaging apps to stop functioning. When the bug was initially reported, Apple treated it as a somewhat low priority item and announced their plan to fix it with the release of iOS 11.3 later this spring. The company's loyal user base, … Read more
IRS Labeled Email Could Contain Ransomware
There's a new strain of the "Rapid Ransomware" making the rounds, and because of how it's being transmitted, it's destined to have a higher than average rate of infection. The new strain was first discovered by Derek Knight. It is disturbing because it claims to come from the IRS, and will feature subject lines like "IRS Urgent Message-164." The body of the email then goes on to say that the recipient owes some amount of money in real estate taxes, and "helpfully" includes instructions for … Read more
40 Percent Of All Login Attempts Are From Bots
Here's a statistic that is as disturbing as it is frustrating. According to the latest "State of the Internet/Security" report for the fourth quarter of 2017, as published by Akamai, bot-traffic accounts for a staggering 43 percent of all login attempts. As bad as that figure is on its face, it's far worse for companies in the hospitality industry, where the figure is an almost unbelievable 82 percent. The reason? Hackers are increasingly using bots to perform "credential stuffing" … Read more
Changes To Google Images Will Make Image Theft Difficult
Image theft is one of the biggest problems on the internet. If you're a photographer, you've almost certainly lost money because people find your work online and make a copy of it rather than paying for the right to use it. Unfortunately, Google has made that incredibly easy to do, but that's changing. Until recently, if you did a Google image search, you'd get a list of images that matched your search phrase, and one of the buttons displayed was a "View Image" button that would take you to … Read more
Vulnerability Found In Popular Grammar Checker
On February 2, Tavis Ormandy, a researcher on Google's Project Zero team discovered a critical flaw in the popular online grammar checking app, "Grammarly." Tens of millions of users make regular use of the app to improve the quality of their writing. The bug allowed a hacker to steal a Grammarly user's authentication token and use that token to log on and access every document they've run through the Grammarly system. This along with that user's history, logs and other data. They were able to … Read more
Blizzard Games Vulnerability Could Leave Gamers Open To Hacking
Do you play Blizzard online computer games such as World of Warcraft, Diablo III, Hearthstone, Starcraft II, or Overwatch? If so, there's a potential problem you need to be aware of. Tavis Ormandy, a researcher on Google's Project Zero team, recently discovered that the Blizzard Update Agent is vulnerable to hacking, via a technique known as "DNS Rebinding." The update agent is designed to accept commands to install, uninstall, change settings, update and perform other maintenance … Read more
2 Million Credit Cards Stolen From Popular Sandwich Shop
By now, we've seen enough large-scale Point of Sale (POS) credit card thefts that patterns are beginning to emerge. Some companies follow the general arc of the narrative better than others and deserve credit for doing so, but in the end, the story is about the same. That's certainly the case with Jason's Deli. Recently, they discovered RAM-scraping malware on a number of their POS terminals. This has happened at a total of 164 of their locations, scattered across 14 states. During the … Read more
