Malware & Threats
The National Institute of Standards and Technology (NIST) has published guidelines for application whitelisting, saying that automation can help companies prevent malicious software from...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
The recently uncovered file-encrypting ransomware Linux.Encoder1 is plagued by a flaw that can be used to recover the files held for ransom by the...
Malware & Threats
Cybercriminals intensified the distribution of malware on Fridays during the third quarter of 2015, the latest CYREN Cyber Threat Report reveals.
Malware & Threats
Researchers at Russian antivirus company Doctor Web have come across a new file-encrypting ransomware that appears to be targeting machines running Linux operating systems.The...
Malware & Threats
CryptoWall 4.0 has been released recently and the latest version of the notorious file-encrypting ransomware brings several notable changes.
Malware & Threats
Researchers at Avast have conducted a brief analysis of OmniRAT, a multi-platform remote administration tool (RAT) that has been used for malicious purposes.
Malware & Threats
Researchers at Check Point Technologies have analyzed an “offline” ransomware that doesn’t need to communicate with a command and control (C&C) server in order...
Malware & Threats
Researchers at FireEye have discovered backdoored versions of a popular ad library in thousands of iOS applications, including ones published in the Apple App...
Malware & Threats
The XcodeGhost compiler malware designed to target iOS and OS X users is still active and its developers have continued to improve their creation,...
Cloud Security
iboss Cybersecurity Raises $35 Million From Goldman Sachs’ Private Capital Group San Diego-based based iboss Cybersecurity announced on Tuesday that it has raised $35...
Application Security
Hackers breached the systems of anti-adblocking solutions provider PageFair and used the access to deliver malware via the publishers that rely on the company’s...
Malware & Threats
Malicious actors have been using a Trojan dubbed “Chikdos” to infect MySQL servers and abuse them to conduct distributed denial-of-service (DDoS) attacks.
Malware & Threats
The Dridex banking Trojan is still active, despite arrests and damage caused to the threat’s infrastructure.Endpoint threat protection company Invincea reported spotting a new...
Malware & Threats
Malicious actors have been using a backdoor Trojan dubbed by researchers “Duuzer” to steal valuable information from organizations in South Korea and elsewhere, Symantec...
Malware & Threats
Roughly 18,000 Android applications built using the Taomike SDK, one of the largest mobile advertisement solution platforms in China, have been found to include...
Malware & Threats
A large number of websites powered by eBay’s Magento e-commerce platform have been breached and abused to deliver malware, researchers warned over the weekend.
M&A Tracker
Researchers have spotted a Nuclear exploit kit attack in which new Flash Player exploits are automatically generated throughout the day in an effort to...
Malware & Threats
A paper published aims to demonstrate that developing rootkits for devices running Cisco IOS doesn’t require advanced knowledge or the resources of a nation...
Malware & Threats
Malicious Rich Text Format (RTF) documents are often used to spread malware, and a recent attack campaign targeting the Israeli public sector has been...
Malware & Threats
The group responsible for the development of the "vigilante malware" known as Wifatch has published the project’s source code.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)