Your daily round-up of some of the other stories in the news
WikiLeaks Reveals Two CIA Malware Frameworks
WikiLeaks released details on what it claims are two frameworks for malware samples dubbed AfterMindnight and Assassin, both allegedly developed by the US Central Intelligence Agency.
Chrome Browser Hack Opens Door to Credential Theft
Researchers at DefenseCode claim a vulnerability in Google’s Chrome browser allows hackers to steal credentials and launch SMB relay attacks.
DocuSign Phishing Campaign Includes Hancitor Downloader
DocuSign warns of a breach and subsequent theft of email addresses that are part of a phishing campaign that employs malicious macro-laced Word documents.
Sleep trackers: more of a data nightmare than a data dream?
Do you drift off each night with an app? Take what it says with a pinch of salt, says the researcher who tried out 10 of them
Hospitals rapped for sharing 1.6m patient records with Google
Passing the patient records to the Google-owned company to help it build a health app as ‘inappropriate’, warns watchdog
OpenVPN Audits Yield Mixed Bag
The results of two audits of the open source software OpenVPN were shared late last week. One found two legitimate vulnerabilities, the other said the service is cryptographically “solid.”
Threatpost News Wrap, May 12, 2017
The news of the week is discussed, including this week’s Microsoft Malware Protection Engine bug, Handbrake OS X malware, the HP keylogger, Trump’s Cybersecurity EO, and more.
Keylogger Found in Audio Drivers on Some HP Machines
Researchers say an audio driver that comes installed on some HP-manufactured computers can record users keystrokes and store them in a world-readable plaintext file.
Trump Signs Cybersecurity Executive Order
President Trump signed the cybersecurity executive order that mandates federal agencies implement the NIST Framework for risk management.