Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Information Security News - SANS Internet Storm Center Information Security News


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Popular News

11 hours ago Google rushes in where Akamai fears to tread, shields Krebs after world's-worst DDoS

The Register View Synopsis+1
600 Gbps traffic flood overwhelmed CDN

Google has provided free distributed denial of service attack (DDoS) mitigation services to security publication Krebs on Security, stepping in after Akamai withdrew support.

7 hours ago Microsoft Removes Windows Journal Due to Security Flaws

SecurityWeek View Synopsis+1

Microsoft has decided to remove the Windows Journal application from its operating systems due to the discovery of several vulnerabilities that can be exploited through specially crafted Journal files.

8 hours ago Google pulls Krebs on Security out of the abyss

ZDNet View Synopsis+1
Google's Project Shield has come to the rescue after a devastating DDoS attack prompted Akamai's pro bono support to end.

4 hours ago Oops. Apple has seriously weakened iOS 10 backups against password hackers

ZDNet View Synopsis+1
A blunder that Apple made in iOS 10 has weakened the encryption of iPhone data when backed up to iTunes.

2 hours ago OpenSSL Patch for Low Severity Issue Creates Critical Flaw

SecurityWeek View Synopsis+1

A fix included in the OpenSSL updates released last week introduced a critical vulnerability that could potentially lead to arbitrary code execution, the OpenSSL Project warned on Monday.

Top News

1 day ago Swiss vote on granting new powers to intelligence services

Yahoo Security View Synopsis+1
GENEVA (AP) - Swiss voters are casting ballots to decide whether to grant new powers to Switzerland's intelligence services like tracking internet activity, snooping on email boxes and tapping phones to better fight spies, criminal hackers and violent extremists.

1 hour ago Yahoo Breach: The Great 'Nation-State' Cop Out

InfoRiskToday View Synopsis+1
Blaming Russia - Not Hacktivists, Insiders or Incompetence - Is EasyAsked to explain the compromise of 500 million of its users' accounts, Yahoo appears to be trying to blame Russia. Of course, that would be an easy face-saving exercise for a publicly traded firm currently negotiating its $4.8 billion sale to Verizon.

1 hour ago Forget About Law and Ethics -- Is Hacking Back Even Effective?

Forbes View Synopsis+1
Are the risks and practical issues too great to allow "hacking back", even if it's not illegal or bad?

Latest News

1 hour ago Thousands of Cisco devices still at risk of unpatched NSA zero-day flaws

ZDNet View Synopsis+1
The tools may have been mistakenly left behind by the NSA following an operation.

2 hours ago Microsoft: Windows 10 now on 400 million devices

ZDNet View Synopsis+1
Microsoft officials said Windows 10 has hit the 400 million 'active' device milestone, up from 300 million in early May.

2 hours ago Avoid the Breach: Live Webinar 9/27 - Register Now

SecurityWeek View Synopsis+1

Live Webinar: Tuesday, Sept. 27th at 1PM ET

2 hours ago Security man Krebs' website DDoS was powered by hacked Internet of Things botnet

The Register View Synopsis+1
Internet of Amazingly Insecure Tat? That's the one

The huge distributed denial of service (DDoS) attack which wiped security journalist Brian Krebs' website from the internet came from a million-device-strong Internet of Things botnet.

3 hours ago That's not funny: MarsJoke ransomware threatens to wipe data if a ransom is not paid within 96 hours

ZDNet View Synopsis+1
New ransomware family discovered by takes aim at government targets

3 hours ago UK Man Involved in 2012 Yahoo Hack Sentenced to Prison

SecurityWeek View Synopsis+1

The U.K. National Crime Agency (NCA) announced last week that one of the members of an international cybercrime group has been given a two-year jail sentence.

7 hours ago And<i>!</i> it<i>!</i> begins<i>!</i> Yahoo<i>!</i> sued<i>!</i> over<i>!</i> ultra-hack<i>!</i> of<i>!</i> 500m<i>!</i> accounts<i>!</i&g

The Register View Synopsis+1
Class-action lawsuit in California expected to be first of many in the US

Just two days after Yahoo! admitted hackers had raided its database of at least 500 million accounts, the Purple Palace is being dragged into court.

7 hours ago Apple to crunch iOS 10 local backup password brute force hole

The Register View Synopsis+1
Research finds faster cracking flaw.

Apple is brewing a fix to patch an iOS password flaw that allows credentials to be stolen from backups.