Is your website hackable?netsparker.com
Use the dead accurate Netsparker web application security scanner to do the work for you, including eliminating false positives.
Andromeda botnet dismantled. EU sponsors VLC bug bounty program. AI.type keyboard leaks info on 31 million users.
Sponsorships
News
Andromeda botnet dismantled in international operationeuropa.eu
The FBI, Europol, Microsoft and others worked together to take down the Andromeda botnet, which served about 80 malware species to an average of 1 million machines per month. Someone suspected of running the botnet was also arrested in Belarus.
EU sponsors bug bounty program for VLC Media Playerbleepingcomputer.com
It's part of an initiative to bolster the security of open-source projects used by EU institutions. Apache HTTP Server and Keepass were previous beneficiaries. The project is hosted on HackerOne and has a total budget of €60.000.
WhatsApp now supports two-step verificationtechcrunch.com
When turned on, it will ask for a passcode. You can optionally enter an e-mail address in case you forget your passcode.
Russia wants to launch backup DNS system by August 1, 2018bleepingcomputer.com
They critize the fact that the US has too much control over the current DNS system, fearing that it gives them a big edge on cyber warfare.
Personal data of 31 million AI.type keyboard app users exposed onlinehackread.com
Not only were they negligent in security, as all data was exposed due to a misconfigured MongoDB instance, but it also seems they were collecting much more information than strictly needed.
TIO Networks breached; personal data of 1.6 million users impactedbleepingcomputer.com
TIO is a company that runs utility and bill payment kiosks in North America. The company is owned by Paypal, but their data is separate from Paypal's.
111GB of personal information in public s3 bucket of a US credit repair companyupguard.com
Another week, another s3 bucket. This time with personal information on tens of thousands of people, including driver’s license and Social Security card images, financial reports, and more.
Blockchain Graveyard: list of cryptocurrency-related breachesmagoo.github.io
Currently the ticker is at 45 incidents. The creator also conveniently breaks down the root causes of the incidents.
Update all the things \o/
- Apple released a bunch of updates, including one for MacOS that permanently fixes the IAmRoot bug: link
- Google released updates to Android, fixing 47 vulnerabilities of which 10 are rated high, and shipped a separate patch for Pixel and Nexus phones for a vulnerability there: link
- Cisco patched several vulnerabilities in its WebEx suite: link
- HP released firmware patches for its enterprise printers to fix a remote code execution flaw: link
- Two critical vulnerabilities were found and patches in the RSA authentication agent and SDK: link
Humble Book Bundle: Network & Security Certificationhumblebundle.com
For those interested, another great Humble Bundle for books on networks and security. Paying $15 (or more) gives you 13 books!
Personal note: started a Hackernews newsletter
This one sends you a daily e-mail with all HN articles over x points.
Feel free to subscribe if that sounds handy :-)