A week in security (August 13 – 19)
Last week on Malwarebytes Labs, we talked about how Process Doppelgänging meets Process Hollowing in the Osiris dropper, provided hints, tips, and links for a safer school year, gave a recap of Black Hat USA 2018, offered some tips for a secure content management system, highlighted a silly snail-mail scamming attempt, and provided insight in why money, power, and ego drive hackers to cybercrime.
- Walmart gains patent to eavesdrop on shoppers and employees in stores. (Source: CNet)
- FBI warns of “unlimited” ATM cashout (Source: Krebs on Security)
- Caesars Palace not-so-Praetorian guards intimidate DEF CON goers with searches. (Source: Ars Technica)
- Researchers discovered a way to hack Echo smart speakers. (Source: Techspot)
- Researchers have found another serious security flaw in computer chips designed by Intel. (Source: BBC)
- Victims lose access to thousands of photos as Instagram hack spreads. (Source: ThreatPost)
- Web cache poisoning just got real: How to fling evil code at victims. (Source: The Register)
- Canadian telcos patch vulnerability in TRS systems. (Source: BleepingComputer)
- Philips vulnerability exposes sensitive cardiac patient information. (Source: Threatpost)
- Fortnite login credentials sold on the dark web for cheap. (Source SCMagazine)
Stay safe, everyone!