Hacking News

Scumbags could, once upon a time, buy a remote access trojan called Luminosity Link for about $40, and get a piece of malware that, when installed on victims’ PCs, would spy on their activities, disable security software, and install further malicious code. Read more

Lenovo warned customers on Friday that two critical Broadcom vulnerabilities impacts 25 models of its popular ThinkPad brand. The vulnerabilities were first revealed in September and originally they were only reported to impact specific Broadcom chipsets used in Apple iPhones, Apple TV and Android devices. Read more

Cyber criminals can take complete control of a user’s system by utilizing a zero-day vulnerability in Adobe Flash Player. This seems to presently be an issue only in the Korean peninsula, but may spread to other places soon. Read more

Security researchers from Forcepoint (US security firm) have discovered a new strain of malware called UDPoS that relies on a different method to steal credit/debit card data from point-of-sale (PoS) systems. Read more

According to fail0verflow, there’s a defect in the boot ROM in Nvidia’s Tegra X1 system-on-a-chip. when your console begins, it reads and performs an execution a piece of code stored in a read-only memory(ROM) This code includes instructions about the booting process. Read more

Victims of Cryakl ransomware are now able to get their files back without paying a ransom to cybercriminals, after the decryption key was released for free as part of the No More Ransom initiative. Read more

For a brief moment Thursday morning, a section of iOS 9’s source code was widely available on GitHub. A few hours later, Apple issued several DMCA notices and had the repositories removed from GitHub. As most of us know, however, once something is published on the internet, it’s nearly impossible to take it back. Read

Updated Infosec bods say they have uncovered what’s thought to be the first case of a major industrial control system network infected with cryptocurrency-mining malware. Read more

Detailed personal information from thousands of insurance customers in Maryland–as well as login credentials for a massive national insurance claims database–was exposed due to an an open port on a NAS server. Read more

Zerodium is offering $45,000 to hackers willing to privately report zero-day vulnerabilities in the Linux operating system. On Thursday, the private exploit acquisition program announced the new addition to its bounties on Twitter. Until 31 March, Zerodium is willing to offer increased payouts of up to $45,000 for local privilege escalation (LPE) exploits. Read more