Security Experts:

Virus & Threats
long dotted


A threat group breached a company’s webmail server and used the access to steal credentials and maintain persistence.
iOS malware dubbed YiSpecter abuses private APIs and enterprise certificates to infect jailbroken and non-jailbroken devices.
A serious vulnerability has been found in the Jetpack plugin for WordPress. Developers patch issue in version 3.7.1.
A mysterious piece of malware has infected tens of thousands of devices across the world, but its operator hasn’t used it for any malicious purposes.
Researcher Patrick Wardle has found a way to easily bypass Apple’s Gatekeeper security feature.
An analysis of the vulnerabilities discovered in the systems of organizations in various industries provides some insight on the most common types of flaws and the time it takes to address them.
Oleg Petrovsky of HP Security Research has detailed some of the methods that can be used to hack and hijack unmanned aerial vehicles (UAVs), better known as drones.
A known Middle Eastern threat actor has been spotted targeting the IT and incident response teams of organizations in the MENA region.
CloudFlare has observed a major DDoS attack that appears to have leveraged a mobile ad network.
A recently discovered vulnerability in cookies could enable an attacker to access private information from HTTPS sessions.

FEATURES, INSIGHTS // Virus & Threats

rss icon

Torsten George's picture
IoT opens up companies all over the world to more security threats, and only time will tell if the IoT vendor community can come together to create a common security framework that helps shrink the security risk iceberg and minimize the risk of cyber-attacks.
Travis Greene's picture
In the case of Hilary Clinton's personal email server, we know that Top Secret information was transmitted over a network that likely wasn’t equipped to safeguard it. If her server was a target of foreign state actors, the implications are frightening.
Nate Kube's picture
Critical services we rely on are increasingly dependent upon cyberphysical interactivity. The scope of these critical services continues to broaden and deepen across industries, especially as the functionality and speed of devices is more widely understood.
David Holmes's picture
As new SSL vulnerabilities surface, we can use our enterprise-specific categorization to decide if it’s going to be a Godzilla day or a Hello Kitty day.
Mark Hatton's picture
Unfortunately, when it comes to security, what you’ve accomplished means very little. It’s all about where the vulnerabilities still exist.
David Holmes's picture
Is it possible to apply this maxim to global SSL patch rates? Let’s take a look at the most recent SSL vulnerability: POODLE.
David Holmes's picture
The media was so taken with the idea that Kate Upton nude photos had caused a DDoS attack that they just took the story and ran with it. But what really caused disrupted service across New Zealand’s major ISPs?
Mark Hatton's picture
Without the ability to prioritize in certain situations, you may end up waiting weeks to apply the most important patch. Think of your corporate network like your home. There are probably lots of items on your honey do list, but they can’t all be completed today.
Marc Solomon's picture
Today’s email-based attacks don’t occur at a single point in time and use multiple methods to evade detection. To bolster protection, organizations may turn to a set of disparate products that don’t – and can’t – work together.
Scott Simkin's picture
As more organizations build applications other than Web and corporate email into the course of their business, adversaries are taking note and adjusting their tactics.