Displaying items by tag: Brian Bartholomew

Microsoft has issued patches for four remotely-exploitable vulnerabilities in its Exchange Server product, a little more than a month after the company warned of four zero-day exploits being used to attack the application.

Veteran security researcher Brian Bartholomew has cast doubt on claims made about attacks by a nation-state backed group on a Chinese VPN provider whose software was used by the Beijing government and its overseas agencies. The allegations were made by Chinese security firm 360 Core Security (Qihoo Security) in a blog post on 6 April.

Researchers from the Russian security firm Kaspersky say they have found a watering hole that uses a full remote iOS exploit chain to deploy an implant named LightSpy.

The investigation into the attack on the networks of the Australian Parliament and the three main political parties — Liberal, Labor and National — is ongoing and the Australian Signals Directorate says it can offer no comment on it now.

Infosec outfit Resecurity, which has come under scrutiny by some well-known researchers over its attribution of some recent hacks, has hit back by accusing its detractors of having ulterior motives for indulging in such criticism.

ANALYSIS Ex-NSA employees are the most likely sources for a yarn that ran in the American website Politico last week, claiming that researchers from Russian security firm Kaspersky Lab had tipped off the NSA that one of its employees, Harold Martin, could be worth investigating, after he allegedly sent Twitter messages to them.