Malware & Threats
Many Lenovo users started complaining last year about a piece of adware being pre-installed on their new computers. After a close analysis, experts have...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Funding/M&A
Network security firm Check Point Software Technologies announced on Wednesday that it has acquired Hyperwise, a privately held, security startup focused on CPU-level threat...
Malware & Threats
For several years now, cybercrime in the financial sector was synonymous with banking botnets such as Zeus and Carberp. By and large, these malware...
Malware & Threats
Researchers at Kaspersky Lab have conducted a detailed analysis of some of the plugins used by the advanced persistent threat (APT) group known as...
Cybercrime
Kaspersky Lab security expert Dmitry Bestuzhev presents research on “Desert Falcons” at the Kaspersky Lab Security Analyst Summit on Feb. 17.
Malware & Threats
The Vawtrak banking malware now leverages macros and the Windows PowerShell scripting tool to infect computers, Trend Micro reported on Monday.
Cyberwarfare
Capabilities of "Equation Group" Surpass Anything Known in Terms of Complexity and Sophistication of Cyber Attack Techniques
Malware & Threats
A Chinese cyber-gang operating under the radar has been able to siphon a small fortune from mobile bankers in South Korea during the past...
Cybercrime
A multinational gang of cybercriminals infiltrated more than 100 banks across 30 countries and made off with up to one billion dollars over a...
Malware & Threats
A new report published by Alcatel-Lucent’s Motive Security Labs estimates that 16 million mobile devices were infected with malware in 2014.
Malware & Threats
An individual claiming to be one of the developers of the RIG exploit kit has leaked the source code for what appears to be...
Malware & Threats
2014 will be remembered for many things. But for those whose credit or debit card information was swiped in a data breach, it may...
Malware & Threats
Major software developers can share their files with Google-owned malware scanning service VirusTotal to ensure that their products are no longer erroneously flagged as...
Malware & Threats
The developers of Simplocker, a piece of ransomware that locks Android smartphones and encrypts files on their external storage, have improved the malware to...
Malware & Threats
Researchers at FireEye have been monitoring a campaign in which malicious actors use Secure Shell (SSH) brute force attacks to install a piece of...
Malware & Threats
The threat actors behind the political and economic cyber espionage campaign known as Operation Pawn Storm have started using iOS malware to steal sensitive...
Malware & Threats
Researchers at Invincea have been monitoring a malvertising campaign in which malicious actors leveraged Adobe Flash Player exploits and file-less infections to deliver ransomware.The...
Malware & Threats
Google recently removed multiple applications from its Google Play store after reports surfaced linking the apps to adware.
Malware & Threats
A new survey from the Ponemon Institute calls web-borne malware not only a growing threat to enterprise data security, but a costly one.
Malware & Threats
Advanced persistent threats (APT) - given the moniker, one might think everything about them is sophisticated.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)