Malware & Threats
Law Enforcement and Tech Organizations Team Up To Disrupt Dorkbot Botnet
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Incident Response
APTs: The Battlefield and Rules of Engagement Have Changed
Malware & Threats
Attacks launched in August by a Chinese APT group against media organizations based in Hong Kong leveraged a piece of malware that abused Dropbox...
Malware & Threats
Enterprises relying on Microsoft’s System Center Endpoint Protection (SCEP) or Forefront Endpoint Protection (FEP) to keep their Windows environments safe can now take advantage...
Cybercrime
2015 has been an eventful year in the world of malware, and few threats have risen more dramatically than ransomware. Unlike other types of...
Cybercrime
The CryptoWall 4.0 ransomware is being spread via exploit kits, with the Nuclear exploit kit (EK) being the first major crimekit to infect machines...
Cybercrime
The infamous Dridex banking Trojan recently surfaced again in spam campaign runs that have managed to achieve a high infection rate, security companies ESET...
Malware & Threats
A highly sophisticated piece of malware has been used by malicious actors since at least 2013 to target the point-of-sale (PoS) systems of U.S....
Malware & Threats
A remote access Trojan (RAT) that managed to stay under the radar for several years has been used by malicious actors to target Chinese...
Malware & Threats
A piece of malware discovered by computer-based testing solutions provider Pearson VUE on its Credential Manager system allowed attackers to access user information.
Malware & Threats
A piece of malicious adware dubbed “Vonteera” tricks the operating system into thinking that digital certificates from security companies are untrusted in an effort...
Cybercrime
Cybercriminals ramped up the creation of Domain Name System (DNS) infrastructure for exploit kits by 75 percent year-on-year during the third quarter of 2015,...
Malware & Threats
The developers of the notorious Dyre (Dyreza) banking Trojan have released a new version of the threat that includes support for Windows 10 and...
Malware & Threats
Google-owned malware scanning service VirusTotal announced on Tuesday that Mac OS X files scanned by users will be executed in a sandbox in order...
Endpoint Security
It’s almost a cliche to talk about how often breaches occur—in 2015 alone, we’ve seen high-profile breaches from everyone from Anthem, the popular work...
Malware & Threats
Thousands of websites have already been infected with the Linux file-encrypting ransomware dubbed Linux.Encoder1, security firms reported.
Malware & Threats
Police body cameras acquired from Martel Electronics have been found to be infected with the notorious Conficker worm.
Malware & Threats
A new point-of-sale (PoS) malware has been widely distributed by cybercriminals alongside ad fraud and information-stealing threats.
Malware & Threats
A point-of-sale (PoS) malware that went largely undetected for the past several years has been analyzed by researchers at Trustwave.Dubbed by the security firm...
Malware & Threats
While analyzing the activities of a threat group, researchers at network security firm Palo Alto Networks came across a new Trojan which they have...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)