Black Hat EuropeFaking digital evidence during a cyber attack – planting a false flag – is simple if you know how, as noted infosec veteran Jake Williams told London's Black Hat Europe conference. Speaking to a packed room, Williams informed his rapt audience that it's straightforward to misdirect investigators trying to attribute a cyber …

VNC remote desktop software has no shortage of potentially serious memory-corruption vulnerabilities, you'll no doubt be shocked to hear. This is all according to [PDF] a team at Kaspersky Lab, which has uncovered and reported more than three dozen CVE-listed security holes, some allowing for remote code execution. VNC, or …

A collection of security, privacy, and digital rights groups have joined up to push a campaign against stalking software. Dubbed the Coalition Against Stalkerware, the campaign will aim to help victims of stalking and domestic violence spot when their mobile phone (or other device) has been infected with tools designed to …

A US court has sentenced the operator of a massive DDoS service to 13 months in prison. Sergiy Usatyuk, 21, from Orland Park, IL was handed the term - along with a $542,925 forfeiture order - after pleading guilty earlier this year to one count of conspiracy to cause damage to internet-connected computers. He will also have to …

A Russian man was detained at Dulles airport in Washington DC on Monday and charged with running a stolen card trading ring that was responsible for $20m worth of fraud. Aleksei Burkov appeared in the Eastern Virginia US District Court on Tuesday to face charges (PDF) of access device fraud, conspiracy to commit access device …

Kasperksy researchers have blamed pesky schoolkids for the big September spike in denial-of-service attacks. They found that more than half of DDoS attacks in the third quarter happen in the month of September. Overall attacks were up just over 30 per cent compared to the second quarter and increased by a similar amount …

RoundupLet's check out some of the more recent security happenings beyond what we've already covered. Chrome bugs cleaned up Anyone running Chrome will want to update and restart their browser in order to make sure they have the latest build, as usual. Google has patched a bunch of flaws including a use-after-free() vulnerability ( …

Here's your Reg roundup of security news beyond all the bits and bytes we've already covered. FBI refreshes voting security push Last year, the FBI kicked off Protected Voices, a campaign to improve voting security at the state and local level. The effort was just expanded for the coming year with new resources and materials, …

British and US spies have blamed Russian hacker group Turla for masquerading as Iranian hackers to launch recent attacks mostly on government systems in the Middle East. The joint advisory comes from the UK's National Cyber Security Centre (NCSC), part of GCHQ, and the US's National Security Agency (NSA). It warned that Turla …

Just one per cent of all Indicator of Attack (IOA) warnings are actually caused by network attacks. This according to security giant Kaspersky, who analyzed (PDF) customer data over the first six months of 2019 and concluded that, 99 per cent of the time, alarms are being raised as the result of something other than a hacker …

Kaspersky says it has uncovered a new malware infection that is able to decode encrypted TLS traffic without the need to intercept or manipulate it. Known as Reductor, the malware was spotted in April of this year and is believed to be the work of an espionage-focused hacking crew known as Turla. The malware is thought to be …

An accused Russian hacker has claimed Kaspersky's former head of investigations blackmailed him into stealing approximately £150,000 from local banks. Dmitry Popelysh is on trial in Moscow over allegations that he helped pinch more than 12 million roubles from financial institutions including Sberbank and VTB. But he told the …

AnalysisWannaCry – the file-scrambling ransomware that infamously locked up Britain's NHS and a bunch of other organisations worldwide in May 2017 – is still a live-ish threat to this day, infosec researchers reckon. By simply observing the internet for telltale signs of the malware strain – also known as WannaCrypt – Brit security …

Malwarebytes will have to head back to court to justify a decision to block its rival’s antivirus services after an appeals court threw out the security shop's legal justification. On Thursday, the Ninth Circuit of Appeals overturned [PDF] a decision by a district court back in 2017 that agreed with Malwarebytes when it said …

Kaspersky Lab reckons the number one reason its customers call them for emergency help is because of ransomware – with Wannacry still playing a large part in detections picked up by the Russian company. In its Incident Response Analytics report for 2018, published this week, Kaspersky said it had seen the infamous malware …

An Android PDF maker with more than 100 million downloads from the official Play Store has been caught silently installing malware on victims' phones. Kaspersky's eggheads Igor Golovin and Anton Kivva claim CamScanner, an application that turns images into PDFs to share and edit, contains a library that quietly fetches and …

With Windows 7's official retirement less than five months away, Redmond is offering some business customers a way to squeeze a bit more life out of the beloved OS. A recently unearthed provision in the Windows 7 and Office 2010 end of support FAQ notes that companies running Windows 10 Enterprise E5, Microsoft 365 E5, …

Companies are inadvertently leaving confidential files on the internet for anyone to download – after uploading the documents to malware-scanning websites that make everything public. These file-probing websites open submitted documents in secure sandboxes to detect any malicious behavior. Businesses forward email attachments …

Kaspersky and Trend Micro have released updates to address vulnerabilities in their respective security tools. The updates come on the heels of the monthly security patch dumps from Microsoft, Adobe, Apple, and SAP, giving admins one more update to test and install on user systems. Kaspersky's fix addresses a privacy hole …

RoundupHere is your friendly summary of recent news from the front lines of information security beyond everything else we've already reported. Our vultures have also spent the past week or so flying around Las Vegas, keeping a close eye on what is essentially hacker comic con. Follow these links for our Black Hat, DEF CON, and …