Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
Researchers from Kaspersky Lab have discovered “AlbaBotnet”, an emerging botnet that appears to be gearing up to inflict financial damage on accounts hosted at banks in Chili.
When it comes to phishing attacks, it appears Web browsers are doing a better job detecting and blocking them than security suites, according to a new report.
Researchers from RSA have identified a new phishing technique called "Bouncer list phishing" which targets a very specific group of victims in targeted attacks.
Metasploit Pro 4.5 brings capabilities that let organizations simulate social engineering attacks and help understand just how vulnerable they may be to phishing attacks.
WHOIS data has been a longtime source of controversy for ICANN - from concerns about threats to free speech to worries cybercriminals profit from the anonymity afforded by lax enforcement of rules around the data's accuracy. ICANN however, is trying to turn a corner.
During a 10-day test period, NSS Labs found that the average phishing URL catch rate ranged from 90% for Firefox 15 to 94% for Chrome 21.
While the lifetime of a phishing site has decreased, the report showed an increase in the number phishing attacks during the period – at least 93,462
A mathematician, examining a job pitch from Google, discovered a flaw in DKIM, which led him to discover that Google, Yahoo, Microsoft, and several other domains were vulnerable to DKIM spoofing.
Now that September has come and gone, many security firms are publishing their Q3 data on malware and cybercrime trends and statistics.
Return Path launched new Anti-Phishing Solutions to help brand marketers and IT Security professionals stop brand-damaging email threats.
- 1 of 7
- ››
FEATURES, INSIGHTS // Phishing
What do you do when your organization has been victimized by a phishing attack? If you wait until you are actually under an attack it is too late.
Organizationally, there are things you can do to help avoid becoming a victim, and to minimize damage if you are victimized.
The semiannual “Global Phishing Survey” from the Anti-Phishing Working Group (APWG) provides powerful insight into what is happening in phishing worldwide.
Cooperation in the underground economy could enable a fraudster in Russia who masters the art of phishing to team up with another fraudster who already has the infrastructure of cashing out compromised online banking accounts of US banks.
Businesses usually don’t think about social engineering when securing company data. It used to be believed that social engineering was reserved for governments and organizations with enemies. That's not the case anymore.
Domain name typo squatting, a decade-old headache for marketing and legal departments, is putting corporate data at risk. But evidence suggests that it is becoming a risk that also needs to be on the CSO's radar.
The risks are real, and growing more complex by the month. That doesn't mean you're powerless to keep your infrastructure and data secure.
Cybercriminals have enough information to construct highly targeted phishing attacks. So, how can you mitigate the risk of falling victim to spear-phishing attacks?
Unlike real-world dumpster diving, "electronic dumpster diving" can enable cybercriminals to access all the documents currently held by the user, not just those that were thrown away.
These best practices for DKIM can help you get more email delivered and lower the likelihood that a message will be categorized as spam.
- 1 of 2
- ››
Subscribe to SecurityWeek
- Researcher to Demonstrate Hollywood Style Attack at BlackHat
- Malicious Campaign Targeting Government Security News Hit Dozens of Sites
- Microsoft Unveils Three Bug Bounty Programs for Win 8.1, IE 11 Previews
- Russia and U.S. Setup Cybersecurity Hotline to Prevent Accidental Cyberwar
- Andreessen Horowitz and Citi Ventures Drop $11M Into Phone Fraud Prevention Startup
- Threat Intelligence Staffing to Evolve Security Operations
- Risk I/O Integrates Real-Time Attack Data
- Top WordPress Plugins Contain Serious Security Vulnerabilities
- Oracle Patches Critical Java Vulnerabilities
- Source Code for Carberp Trojan for Sale in Cybercrime Underground
Copyright © 2013 Wired Business Media. All Rights Reserved. Privacy Policy | Terms of Use