Update your Android now – many holes fixed including ‘BroadPwn’ Wi-Fi bug

Source: Sophos Naked Security Google’s July 2017 security fixes for Android are out. As far as we can see, there are 138 bugs listed, each with its own CVE number, of which 18 are listed with the tag “RCE”. RCE stands for Remote Code Execution, and denotes the sort of vulnerability that could be abused by a crook to run some… Read More »

A Method For Verifying Integrity And Authenticating Digital Media

Source: Forensic Focus by Martin Harran, William Farrelly & Kevin Curran Due to their massive popularity, image files, especially JPEG, offer high potential as carriers of other information. Much of the work to date on this has focused on steganographic ways of hiding information using least significant bit techniques but we believe that the findings in this project have… Read More »

How did some Ethereum users find themselves with empty wallets?

Source: Sophos Naked Security On the evening of June 29 (ET), users of Classic Ether Wallet were alerted to the sort of news anyone who invests in cryptocurrencies must dread. It’s not clear who first noticed that something was awry with the the wallet’s classicetherwallet.com domain, but Twitter was soon spewing warnings. By the early hours of the… Read More »

New variant of Petya ransomware (also known as Petrwrap/PetyaWrap)

Source: Sophos Knowledge Base Overview Sophos is aware of a new ransomware variant being seen in multiple countries today. Our investigation shows that this attack both encrypts files and the Master Boot Record (MBR) and can spread rapidly using several techniques, including the “EternalBlue” exploit of a vulnerability in the Windows Server Message Block (SMB) service, which Windows… Read More »

High number of sandbox worker processes – Dynamics 365

Issue with Dynamics 365 update 2.1 This is the latest update for Dynamics 365 on-premise released April 2017. We deployed this latest update a couple of weeks ago across all our hosted dynamics environments and like many others we were hit by a critical issue with the sandbox service in this latest update. If you don’t have any… Read More »