Twitter shot itself in the foot recently but is working hard to get out in front of the problem. According to a recent blog post, the company experienced an issue with its hashing routine - a process which masks user passwords, making them virtually impossible to crack.
All Twitter Passwords Exposed, Change Your Password Now
Some VW and Audi Cars May Be Hacked Through WiFi
Thanks to researchers Daan Keuper and Thijs Alkemade (who work at the Dutch cyber-security firm Computest), newly produced Golf GTE and Audi A3 vehicles are a little bit safer, and a lot less vulnerable to remote hacks.
The duo found that by taking advantage of these vehicles' WiFi connection, they could access the cars' IVI, (in-vehicle infotainment system) and from there, gain access to other systems as well.
Use Caution Traveling, Hackers Now Have Keys To Hotel Rooms
Score one for the good guys, but with hesitation. Unfortunately, in today's fast-moving digital world, even a victory doesn't mean the end of a problem.
Recently, a pair of researchers (Tomi Tuominen and Timo Hirvonen of F-Secure) released information about a new hack they had discovered.
Hackers Can Use PDF Files To Access Windows Credentials
Security researcher Assaf Baharav from Check Point Security has discovered a new twist on an old, fairly well-known attack. He was able to essentially "weaponize" PDFs to steal Windows credentials stored in NTLM hashes. Unfortunately, no action other than simply opening the PDF is required for the hacker to gain access to the information.
WiFi Sync on iOS Vulnerable To TrustJacking
Owners of Apple devices have a new attack vector to worry about, called "TrustJacking." Symantec researchers recently stumbled across a pair of scenarios that take advantage of Wi-Fi syncing of various Apple devices. These are scenarios that also take advantage of the trust users have in the security of their own devices, allowing hackers to take complete control over those devices.
Information On 48 Million People Leaked Through Massive File
File this one away under self-inflicted wounds. It has recently come to light that a company called LocalBox left a massive data file vulnerable on a cloud server. The data file was more than a terabyte in size and contained detailed psychometric profiles of more than 48 million people.
New Malware Takes Screenshots and Steals Your Passwords
Recently, a new strain of malware called "SquirtDanger" has been found by researchers at Palo Alto Networks Unit 42, and it's a particularly nasty one for a couple of reasons. First and foremost, the owner of the malware isn't orchestrating campaigns himself, but rather, selling his product as a commodity on the Dark Web.
Bank Employee Steals Info On Over A Million Customers
Atlanta-based SunTrust Bank is the 12th largest bank in the US. They have a major problem, and so do roughly a million and a half of its customers. According to CEO William Rogers, an unidentified employee of the firm printed a vast amount of private customer information, including their names, addresses, phone numbers and account balance information.
Researchers Find Major Vulnerabilities In Banking Apps
Do you do your banking online? If so, there's bad news in the form of a report recently released by the security firm "Positive Technologies."
The company tested a variety of websites using a proprietary tool they developed in-house, which scans websites for security flaws.
Major Server Ring Distributing Malware Taken Down
Score one for the good guys. A researcher from BrilliantIT was recently able to figure out how infected computers would connect to EITest's command and control server, and using that information, was able to bring down their entire network.
If you haven't heard of EITest before, the true significance of that statement might not be registering.