GlobalDots Blog

New Insider Attack Steals Passwords by Reading Thermal Energy from Keyboards

After entering a password, your regular computer keyboard might appear to look the same as always, but a new approach harvesting thermal energy can illuminate the recently pressed keys, revealing that keyboard-based password entry is even less secure than previously thought.

Cross-Site Scripting Still Number One Web Attack

Web applications are a common target for cyber attacks. And attacks are always evolving. That's why one of the conclusions of a new report — that the venerable cross-site scripting attack is still the number one threat — stands out.

Attackers Can Use Sonic and Ultrasonic Signals to Crash Hard Drives

According to a new research paper published by a team of researchers from the University of Michigan and Zhejiang University, sonic and ultrasonic sounds causes false positives in the shock sensor, causing a drive to unnecessarily park its head.

Z-Wave Downgrade Attack Left Over 100 Million IoT Devices Open to Hackers

Researchers have found that even after having an advanced encryption scheme in place, more than 100 million Internet-of-Things (IoT) devices from thousands of vendors are vulnerable to a downgrade attack that could allow attackers to gain unauthorized access to your devices.

25% of Organizations Lack Confidence in Cloud Storage

16% of businesses have been hit by a cloud storage security incident, Spiceworks finds.

FBI Seizes Control of a Massive Botnet that Infected over 500,000 Routers

Shortly after Cisco's released its early report on a large-scale hacking campaign that infected over half a million routers and network storage devices worldwide, the United States government announced the takedown of a key internet domain used for the attack.

Get Ready for WannaCry 2.0

Another widespread worm attack is "inevitable," but spreading a different more lucrative or destructive payload, experts say.

First-Ever Ransomware Found Using Using 'Process Doppelgänging' Attack to Evade Detection

Security researchers have spotted the first-ever ransomware exploiting Process Doppelgänging, a new fileless code injection technique that could help malware evade detection.

Google Announces the Open-Source Asylo Framework for Confidential Computing

Google announced the release of an open-source framework and an SDK dubbed ‘Asylo’ that allows developers to build applications targeting trusted execution environments.

Azure Container Instances Now Generally Available

Microsoft announced the general availability of Azure Container Instances (ACI) – a serverless way to run both Linux and Windows containers. ACI offers an on-demand compute service delivering rapid deployment of containers with no VM management and automatic, elastic scale.