Cybercrime
Nobody likes to admit to a breach - but when the breach involves ransomware it cannot be denied for long. Visitors cannot access public-facing...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
FireEye has shared some technical details on the Flash Player zero-day that was patched last week by Adobe and revealed that attackers have been...
Malware & Threats
Petya, a piece of malware observed in late March to encrypt the entire hard drive o infected computers, has received an update and is...
Malware & Threats
A clickfraud botnet that has ensnared a large number of devices around the world hijacks search results to help cybercriminals make a profit through...
Malware & Threats
Researchers at endpoint security firm Cybereason have identified several new domain generation algorithm (DGA) variants currently used by malware and exploit kits.
Malware & Threats
An Android banking Trojan discovered two years ago has become a global threat in the past months, after being updated with new ransomware capabilities,...
Cybercrime
At a financial conference in Frankfurt, Thursday, SWIFT's chief executive Gottfried Leibbrandt told the audience that the $81 million theft from the Bangladesh central...
Malware & Threats
The Russia-linked cyber espionage group Pawn Storm has been observed targeting the Christian Democratic Union of Germany, the political party of Chancellor Angela Merkel.
Application Security
The ongoing battle over the Federal Bureau of Investigation’s (FBI) use of a zero-day in the Tor anonymity browser hit a new gear this...
Malware & Threats
The rapid rise of ransomware has made it the latest marquee threat in cybersecurity. The growth in victims and damages has been widely reported,...
Application Security
Security researchers are seeing evidence that up to 36 global organizations have been hacked via exploits against a vulnerability in SAP Business Applications that...
Malware & Threats
Ransomware is dominating the headlines so far in 2016, having moved from targeting individuals to holding corporate data hostage and extorting payments to decrypt...
Application Security
A zero-day vulnerability in Adobe’s ubiquitous Flash Player software is being exploited to launch malware attacks, the company warned in an advisory issued today.The...
Malware & Threats
CloudFlare and Sucuri reported observing various types of ImageTragick exploits used by malicious actors for reconnaissance purposes and to gain access to vulnerable web...
Cybercrime
The Bucbi ransomware, a threat detected back in early 2014, has received a significant update and now uses RDP brute force attacks as its...
Malware & Threats
Contending with hostage situations is no longer something only shipping companies moving goods through pirate-infested waters must consider. With the growing threat of ransomware...
Malware & Threats
A new Android banking Trojan capable of spying on users and stealing credit card info is achieving persistency on infected devices by asking for...
Malware & Threats
Lenovo's problems with pre-installed bloatware causing major security problems for computer users aren’t going away anytime soon.
Malware & Threats
The most commonly targeted vulnerability in 2015 was a Windows flaw that came to light in 2010 after being exploited by the notorious Stuxnet...
Malware & Threats
Hackers caused disruption to a Locky campaign after they breached one of the attackers’ server and replaced the real ransomware with a harmless file...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)