Malware & Threats
Researchers at Symantec have discovered a new piece of Android malware that drops and runs a firewall binary called DroidWall on compromised devices to...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Cybercrime
Raspberry Pi Foundation Receives Offer for Pre-Installing MalwareThe Raspberry Pi Foundation revealed recently that it was offered money to pre-install malware on its Raspberry...
Malware & Threats
A threat group known for targeting Russian organizations has recently started using a new tool in its cyber espionage operations, Palo Alto Networks reported...
Malware & Threats
The Ramnit botnet, a threat disrupted by tech companies and European law enforcement in February, is back and it’s targeting online banking users in...
Malware & Threats
An exploit for a recently patched Adobe Flash Player vulnerability has been added to the Angler exploit kit and it has been used by...
Malware & Threats
Traditional endpoint antivirus, which relies on static signatures to identify malicious files, URLs and IP addresses has outlived its useful life. New attack techniques,...
Malware & Threats
Congress on Friday passed legislation to fight cyber threats, pushing the measure through by tucking it into a sprawling government funding bill, after earlier...
Malware & Threats
Android users in Russia who conduct online banking from their smartphones have been targeted with a piece of malware designed to steal sensitive information...
Malware & Threats
Macro malware, one of the most successful threats in the 1990s, has returned to focus in the form of persistent threats targeting organizations, Intel...
Malware & Threats
Researchers at Zscaler have been monitoring a new Spy Banker campaign targeting users in Brazil via attacks leveraging social media networks, the Bit.ly URL...
Malware & Threats
FireEye on Friday shared details on a recently discovered, highly obfuscated bot that has compromised companies around the world and remained largely undetected by...
Malware & Threats
A well-funded and well-organized threat group that focuses its activities on Asian companies has been using Bifrose code to develop its own backdoors, Trend...
Malware & Threats
The number of Mac OS X systems infected with malware during the first nine months of 2015 is seven times higher than in all...
Malware & Threats
The number of new malware files detected each day dropped by roughly 15,000 in 2015 when compared to the last year, according to a...
Malware & Threats
A threat group that has been active for at least seven years has used malware, phishing and disinformation tactics to target activists, journalists, politicians...
Malware & Threats
Two Iran-based threat groups that appear to be linked have been conducting cyber espionage campaigns aimed at entities in Iran and other Middle Eastern...
Malware & Threats
Much of today’s Web content—news, search, free email and collaboration tools, video sharing and social media—is paid for by advertising. Ads are an effective...
Malware & Threats
A new Trojan is stealing information from Android devices after gaining root access on them by using a commercial root tool and is affecting...
Cybercrime
"FIN1" Attackers Use Hard to Detect BOOTRASH Malware to Steal Financial DataIncident responders from FireEye’s Mandiant group have discovered new tactics being used by...
Cybercrime
A new malicious campaign aimed at infiltrating point-of-sale (PoS) systems around the world is currently underway, and taking advantage of powerful, highly adaptable tools,...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)