Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Cybercrime
Researchers at FireEye have analyzed the operations of the advanced persistent threat (APT) group dubbed "Pitty Tiger," and determined that it might have been...
Malware & Threats
Researchers Develop “BadUSB” to Demonstrate Extreme Threats Posed by USB DevicesUsers have long been warned about the dangers of using USB drives, but new...
Endpoint Security
Microsoft announced on Thursday the general availability of the Enhanced Mitigation Experience Toolkit (EMET) 5.0.
Cybercrime
Israel-based threat detection firm Seculert has been monitoring the effects of the recent Gameover Zeus and Shylock botnet takedown operations, and found that the...
Malware & Threats
Researchers at Kaspersky Lab released a detailed analysis of an advanced attack campaign that has struck about 2,800 victims across multiple industries worldwide.
Endpoint Security
Several of the most popular antivirus products contain vulnerabilities that can be exploited locally or remotely, a security researcher revealed at the SyScan 360...
Malware & Threats
Whoever is behind the development of the Neverquest (Snifula) Trojan has been busy.
Cybercrime
Kaspersky Lab has published a new research paper on Koler, the "police" ransomware that has been targeting Android users since April.
Cybercrime
The crash of the Malaysia Airlines flight MH17 in eastern Ukraine on June 17 continues to make headlines, making it a perfect event for...
Cybercrime
After analyzing a recently discovered piece of ransomware called CTB-Locker (Critroni), security researchers from Kaspersky Lab have determined that the threat has a number...
Malware & Threats
Starting with Firefox 31, the malware detection mechanism integrated into the Web browser has been expanded to include downloaded files, Mozilla announced on Wednesday.
Malware & Threats
Real Googlebots help Google discover new and updated webpages so they can be added to the search engine's index; fake Googlebots have no such...
Cybercrime
A large number of websites have been compromised over the past days by cybercriminals who are exploiting a recently patched security hole in a...
Cybercrime
The United States website of the Metro newspaper (metro.us), which serves an estimated 1 million visitors every month, has been compromised and abused to distribute a...
Cybercrime
2FA Systems Used by Banks Bypassed with Malware, Rogue Mobile AppsSMS-based two-factor authentication (2FA) mechanisms used by banks to secure their customers' accounts have...
Cybercrime
A new file-encrypting piece of ransomware advertised on underground forums since mid-June is being increasingly used by cybercriminals, a security expert reported last week.
Cybercrime
Ever since its existence came to light in November 2013, the Neverquest banking Trojan has been enhanced with new features that make it an...
Cybercrime
An in-depth analysis of a recently discovered piece of malware that's designed to target Linux and Unix Web servers has been published on Thursday...
Malware & Threats
Security researchers believe cybercriminals may be taking a page from government agencies when it comes to malware. According to Sentinel Labs, that metaphorical page...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)