Malware & Threats
A recently discovered piece of malware allows cybercriminals to physically steal credit and debit cards inserted into automated teller machines (ATMs), researchers at FireEye...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
Google Search Console, known until May 2015 as Google Webmaster Tools, has been abused by malicious actors to improve blackhat search engine optimization (SEO)...
Malware & Threats
A new Android screening-locking malware targeting mainly users in the United States has been discovered by ESET researchers, who say this is the first...
Malware & Threats
IBM reported in August that its researchers had come across CoreBot, a new piece of malware designed to steal data from infected devices. Initially,...
Malware & Threats
The notorious Angler exploit kit has started leveraging the Diffie-Hellman cryptographic algorithm to make it more difficult to detect exploits and prevent researchers from...
Malware & Threats
A new version of the notorious Carbanak Trojan, also known as Anunak, has been spotted in the wild by researchers at Denmark-based CSIS Security...
Malware & Threats
The developers of an adware installer are leveraging an old trick to access the Keychain on OS X devices, researchers have warned.
Malware & Threats
Despite the fact that its activities have been exposed by security researchers, the Iran-linked threat group dubbed “Rocket Kitten” continues to target individuals and...
Malware & Threats
A new banking Trojan has been used to target the customers of more than a dozen Japanese banks, IBM reported on Monday.Dubbed “Shifu,” the...
Malware & Threats
Malware that leverages a computer’s graphics processing unit (GPU) made headlines earlier this year when researchers developed several experimental threats designed to use the...
Malware & Threats
Researchers have uncovered a new malware family designed to target devices running Apple’s iOS mobile operating system. The threat has already been used to...
Malware & Threats
Researchers at IBM have come across a new piece of malware designed to steal sensitive information from infected computers.
Malware & Threats
The actor behind the sophisticated cyberespionage tool dubbed “Regin” has not given up on its operations after its activities were exposed last year by...
Malware & Threats
Sphinx, a new banking Trojan based on the source code of the notorious Zeus malware, is up for sale for $500.
Malware & Threats
IBM Security’s X-Force Threat Intelligence report for the third quarter of 2015 reveals that the Tor (The Onion Router) anonymity network is increasingly leveraged...
Malware & Threats
Researchers at cloud security company Zscaler have spotted a campaign in which attackers are redirecting victims to malware-serving websites with the aid of thousands...
Malware & Threats
Kaspersky Lab has analyzed the activities of Blue Termite, an advanced persistent threat (APT) group focusing its efforts on Japanese organizations.
Malware & Threats
Malicious actors have leveraged the critical Internet Explorer vulnerability patched by Microsoft on Tuesday to deliver a piece of malware through various legitimate websites,...
Malware & Threats
Emissary Panda Using Hacking Team Exploits to Deliver RATThe Chinese advanced persistent threat (APT) group known as Emissary Panda and Threat Group 3390 has...
Malware & Threats
Russian anti-virus vendor Kaspersky Lab is denying accusations that it conducted operations designed to trick software from competing firms into classifying harmless files as...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)