Malware & Threats
In recent attacks involving the Angler exploit kit, malicious code was injected directly into running processes instead of being written to the disk, a...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
AVG Technologies announced its plan today to acquire Location Labs, a privately-held company focused on securing mobile devices.
Cybercrime
A new variant of the Bifrose backdoor has been used in a cyberattack aimed at an unnamed device manufacturer, Trend Micro reported.
Cyberwarfare
A new variant of BlackPOS (Kaptoxa), a piece of RAM scraping malware designed to target point-of-sale (PoS) systems, has been spotted in the wild...
Malware & Threats
A group of hackers possibly related to or a part of The Syrian Electronic Army have been spotted using a .NET-based malware tool to...
Cybercrime
Srizbi, once considered one of the most powerful botnets, is apparently trying to make a comeback with the aid of a new piece of...
Malware & Threats
The Payment Card Industry (PCI) Security Standards Council is encouraging retailers to take steps to better protect themselves from the Backoff point-of-sale (PoS) malware...
Cybercrime
Netflix has released two applications used by the company's security team to monitor the Web for potential threats.
Cybercrime
A major online advertising company has been serving malicious ads on several high-profile websites, Fox-IT reported on Wednesday.
Cybercrime
After analyzing hundreds of millions of hostnames, researchers have determined that many of them are live only for a 24-hour period, timeframe in which...
Malware & Threats
Security vendors have their eyes set on cloud and virtual environments this week as the VMworld conference in San Francisco gets underway.
Malware & Threats
Attackers are targeting Russian victims with a ruse designed to get them to install the Kelihos malware, according to security firm BitDefender.
Cyber Insurance
Small and medium companies in the European automobile sector have been targeted by cybercriminals using a relatively new piece of malware, according to a...
Cybercrime
The United States Secret Service estimated more than 1,000 businesses have been infected by the "Backoff" point-of-sale malware, and many of them are unaware...
Cybercrime
Cybercrooks are not ready to give up on fake anti-virus attacks just yet and they're even coming up with new methods to trick victims...
Malware & Threats
The notorious Reveton ransomware has been updated to steal passwords and credentials, according to researchers with security firm Avast.
Cybercrime
Researchers at Russia-based security company Doctor Web have noticed that a piece of malware designed to run on Linux computers has been ported by...
Malware & Threats
The complete source code for the Android remote access Trojan (RAT) called Dendroid has been leaked online, which researchers have found contains several vulnerabilities.
Cybercrime
A new piece of ransomware analyzed by researchers from iSIGHT Partners uses visual components borrowed from CryptoLocker and CryptoWall.
Malware & Threats
It was 2010 when the Stuxnet malware first appeared in the public consciousness.Though the years have passed however, there is no shortage of machines...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)