Malware & Threats
Barracuda Networks announced the launch today of Threatglass, a frontend online tool for analyzing web-based malware.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
The Gameover ZeuS Trojan has been updated with functionality targeting bitcoin wallets. Researchers with F-Secure spotted a variant of the malware that includes code...
Malware & Threats
A team of security researchers has uncovered a widespread attack campaign that has infected more than 25,000 Linux and UNIX servers around the world.
Cybercrime
SINGAPORE - Cybercriminals are exploiting the disappearance of a Malaysia Airlines plane by luring users to websites purporting to offer the latest news in...
Malware & Threats
Security researchers from BAE Systems and G-Data recently shared research on a cyber-espionage toolkit called Snake (also referred to as Turla or Uroburos) that...
Malware & Threats
WASHINGTON - The National Security Agency has developed malware that allows it to collect data automatically from millions of computers worldwide, a report based...
Cyberwarfare
LONDON - Dozens of computer networks in Ukraine have been infected by an aggressive new cyber weapon called Snake, according to expert analysis.
Malware & Threats
Point-of-sale (POS) malware has been the sharp end of the stick for attackers recently. Tied to attacks on businesses from Target to Neiman Marcus,...
Cybercrime
Cloud-based security solutions provider Proofpoint has launched a new offering designed to combat malvertising. Based on technology gained from its August 2013 acquisition of...
Malware & Threats
The TOR Network's promise of anonymity is attractive for all kinds of Web users, human rights activists, political dissidents and everyday users concerned about...
Malware & Threats
It has been a rough year so far for the world of cryptocurrency. First it was the collapse of Mt. Gox; now two more...
Malware & Threats
The website Meetup.com is back online after a powerful distributed denial-of-service attack was launched against the site.
Malware & Threats
The Gameover Trojan has added a new level to its malicious activity.
Malware & Threats
Earlier this month, security researchers from FireEye discovered a new IE 10 Zero-Day exploit (CVE-2014-0322) that was being used in a watering hole attack...
Malware & Threats
Adobe Systems issued critical security updates today to address vulnerabilities in Adobe Flash Player - including one vulnerability that is under attack.
Data Protection
CrowdStrike, a provider of security solutions for identifying advanced threats and targeted attacks, announced the availability of Endpoint Activity Monitoring (EAM), an application on...
Malware & Threats
Like Mosquitoes, Malware is Everywhere and is a Formidable Adversary...
Malware & Threats
US Man Sues Ethiopia for Cyber SnoopingSAN FRANCISCO - A lawsuit filed on Tuesday accuses Ethiopia of infecting a US man's computer with spyware...
Endpoint Security
Cylance Launches Mathematically-assisted Endpoint Threat Protection
Cybercrime
PUNTA CANA - KASPERSKY LAB SECURITY ANALYST SUMMIT - A highly sophisticated gang of criminals inserted infected USB sticks into ATMs and emptied out...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)