Top all-time · #521
Trend Micro
Company blog · blog.trendmicro.com/trendlabs-security-intelligencesecurity
Trend Micro is the company blog at blog.trendmicro.com, writing about security. Since 2009, 112 different Hacker News readers have linked it 129 times, most often “XCSSET Mac Malware infects Xcode projects, performs UXSS attack on browsers”. No feed was found, so read it on the site itself.
Most-linked posts?
- XCSSET Mac Malware infects Xcode projects, performs UXSS attack on browsers3 people · 3 mentions · first linked 2020-08-14
- 55M voters details leaked in Philippines3 people · 3 mentions · first linked 2016-04-07
- Setting the Record Straight on Baidu's Moplus SDK and the Wormhole Vulnerability3 people · 3 mentions · first linked 2015-11-03
- The Crisis of Connected Cars: When Vulnerabilities Affect the CAN Standard3 people · 3 mentions · first linked 2017-08-17
- Uninstall QuickTime for Windows Today3 people · 3 mentions · first linked 2016-04-15
- ‘GODLESS’ Mobile Malware Uses Multiple Exploits to Root Devices2 people · 2 mentions · first linked 2016-06-24
- Let’s Encrypt Now Being Abused by Malvertisers2 people · 2 mentions · first linked 2016-01-07
- /pwn2own-day-2-event-wrap/2 people · 2 mentions · first linked 2016-09-26
- Hacking Team Uses UEFI BiOS Rootkit to Keep RCS 9 Agent in Target Systems2 people · 2 mentions · first linked 2015-07-14
- A Look at the Open Type Font Manager Vulnerability from the Hacking Team Leak2 people · 2 mentions · first linked 2015-07-08
What Hacker News says?
> has google ads been responsible for virus/malware in the past? Yes. http://blog.trendmicro.com/trendlabs-security-intelligence/y...
Comment linking /trendlabs-security-intelligence/youtube-ads-lead-to-exploit-kits-hit-us-victims/
on “We’re dropping Google Ads”Submitted First Java Zero-Day Attack in Two Years Targets NATO and US Defense Organizations as a story · 205 points
HN discussionAgreed on Safari/Edge but note that I didn't use the words "very secure" to describe Chrome in isolation. How can something that gets publicly exploited year after year by _teenagers_ (1)(2) be called "very secure" ? The grim reality is that we never had a browser than can be called even remotely secure. Major factors for that are the implementation languages (C++ and C) and the vast attack surface. It's dishearteni…
Comment linking /pwn2own-day-2-event-wrap/
on “UnGoogled Chromium: Chromium with enhanced privacy, control and transparency”Submitted Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More as a story · 179 points
HN discussionThey're a constant problem in all browsers. Take last year's Pwn2Own for example: http://blog.trendmicro.com/pwn2own-day-2-event-wrap/ Demonstrated a successful code execution attack against Safari to gain root privileges using an use-after-free vulnerability in Safari and an out-of-bounds vulnerability in Mac OS X. Demonstrated a successful code execution attack against Microsoft Edge in the SYSTEM context using an…
Comment linking /pwn2own-day-2-event-wrap/
on “WebAssembly: Mozilla Won”Submitted XCSSET Mac Malware infects Xcode projects, performs UXSS attack on browsers as a story · 175 points
HN discussionPart of the problem I have with the notion that Apple (and Google) need such tight control over their app stores is that they do such a bad job of it. https://www.nytimes.com/2016/11/07/technology/more-iphone-fa... https://blog.trendmicro.com/trendlabs-security-intelligence/... https://www.wired.com/story/apple-app-store-malware-click-fr... https://crappygames.miraheze.org/wiki/Category:IOS_Games
Comment linking /trendlabs-security-intelligence/gambling-apps-sneak-top-100-hundreds-fake-apps-spread-app-store-google-play/
on “Apple, Epic, and the App Store”Submitted Hacking Team Uses UEFI BiOS Rootkit to Keep RCS 9 Agent in Target Systems as a story · 112 points
HN discussionThe security researcher posted a followup: http://blog.trendmicro.com/russia-experience-part-2/
Comment linking /russia-experience-part-2/
on “NBC Story about Hacking at Sochi is 100% Fraudulent”Submitted Let Me Get That Door for You: Remote Root Vulnerability in HID Door Controllers as a story · 95 points
HN discussionPerhaps people want the ability to choose between fully featured app stores, because of things like these https://arstechnica.com/information-technology/2020/01/resea... https://blog.trendmicro.com/trendlabs-security-intelligence/... https://www.techrepublic.com/article/new-android-bug-targets... https://www.zdnet.com/article/popular-apps-on-google-play-li...
Comment linking /trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group/
on “Fortnite seems to have been removed from the Play Store as well”Submitted Let’s Encrypt Now Being Abused by Malvertisers as a story · 86 points
HN discussionDear FBI, why bother Apple? Just hire Chinese or Korean engineers[1] to crack it! They know more backdoors than Apple does. [1] http://blog.trendmicro.com/pwn2own-day-1-recap/
Comment linking /pwn2own-day-1-recap/
on “Apple Encryption Engineers, If Ordered to Unlock iPhone, Might Resist”Submitted Cybercriminals Use Malicious Memes That Communicate with Malware as a story · 66 points
HN discussionYou can buy RATs. The several RATs used in this campaign were never for sale. For example the RAT named X-Agent was one of several used in the DNC hack. It has never been put up for sale and it was used in previous Russian intelligence operations (for example tracking Ukraine artillery[0]). >That's not what is usually called a rootkit It doesn't appear that anyone has reverse engineered the PC version of X-Agent but…
Comment linking /trendlabs-security-intelligence/pawn-storm-update-ios-espionage-app-found/
on “Technical report on DNC hack [pdf]”Submitted The Crisis of Connected Cars: When Vulnerabilities Affect the CAN Standard as a story · 38 points
HN discussionIt's called a watering hole attack. You infect many of the devices way ahead of time (that are interested in whatever subject area you targeted), and pick your victim when you need to. If you haven't prosecuted these cases, you'd be surprised how often it happens: https://www.cyberscoop.com/winter-olympics-hack-attribution-... https://krebsonsecurity.com/2017/08/blowing-the-whistle-on-b... https://blog.trendmicro.co…
Comment linking /trendlabs-security-intelligence/eyepyramid-lesson-perils-attribution/
on “Guccifer 2.0 Slipped Up and Revealed He Was a Russian Intelligence Officer”Submitted Not So Spooky: Linux “Ghost” Vulnerability as a story · 38 points
HN discussionAnd yet according to these sources[0][1], Firefox is back this year in Pwn2own. A quote from [1]: > "Mozilla improved their security enough for us to warrant their re-inclusion in the contest," Gorenc said. Firefox is fine. Like in every other browser, when security problems are found, they are fixed. There's a lot of work going into making Firefox a great and secure browser, and to call for abandoning it en masse i…
Comment linking /pwn2own-returns-for-2017-to-celebrate-10-years-of-exploits/
on “What’s up with Firefox?”Submitted Trend Micro Discovers New Java Zero-Day Exploit as a story · 33 points
HN discussionYour viewpoint is like the post "DNSCrypt – Not Fundamental Enough" (2011) from TrendMicro. http://blog.trendmicro.com/trendlabs-security-intelligence/d...
Comment linking /trendlabs-security-intelligence/dnscrypt-not-fundamental-enough/
on “DNSCrypt – A protocol to improve DNS security”Submitted GDPR vs. Blockchain: Technology vs. The Law as a story · 32 points
HN discussionLet's Encrypt had a similar vulnerability late last year.[1] That was successfully exploited in a malware attack. There's also a potential BGP attack.[2] Validating that a host is on the correct domain is very hard in the presence of attacks. DNS can be spoofed. If there was an easy way to verify domains, CA-issued SSL certs would be unnecessary. [1] http://blog.trendmicro.com/trendlabs-security-intelligence/l... [2…
Comment linking /trendlabs-security-intelligence/lets-encrypt-now-being-abused-by-malvertisers/
on “StartEncrypt considered harmful today”Submitted FLocker Mobile Ransomware Crosses to Smart TV as a story · 17 points
HN discussionI think my point is pretty clear - your comments regarding the state of Android security are very lacking. I suggest you watch this video by Adrian Ludwig at Next 2017 for an overview: https://www.youtube.com/watch?v=Zm6ziX5pqt8 >Second, 200k USD for a vulnerability of such caliber is peanuts. I think that's the going rate offered by companies that buy exploits like Zerodium. Do you know of a company offering a bett…
Comment linking /results-mobile-pwn2own-2016/
on “How sandboxing works in Fuchsia”Submitted Looking into a Cyber-Attack Facilitator in the Netherlands as a story · 9 points
HN discussionFirst, is there a point that you are trying to make because I didn't see any. Second, 200k USD for a vulnerability of such caliber is peanuts. Third, you must have missed this: http://blog.trendmicro.com/results-mobile-pwn2own-2016/
Comment linking /results-mobile-pwn2own-2016/
on “How sandboxing works in Fuchsia”Submitted Setting the Record Straight on Baidu's Moplus SDK and the Wormhole Vulnerability as a story · 8 points
HN discussionNot everyone's got AIS and ECDIS though. The places where I trained really pushed DSC for fishing and recreational use, by making it relevant to the little guys too: "If you'd just found a good fishing spot or a nice quiet place, why would you go blabbing to everyone about it on ch16? Call your mate up on DSC instead." They also made a point of telling people to spend that bit extra to get a radio that doesn't suck.…
Comment linking /trendlabs-security-intelligence/vulnerabilities-discovered-in-global-vessel-tracking-systems/
on “Sortie en mer – A trip out to sea”Submitted Java Native Layer Exploits Going Up as a story · 7 points
HN discussion
