Malware & Threats
Hackers can use rogue applications to disable passcodes and other device locks on the Android (Jellybean) mobile operating system, according to a warning issued...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Malware & Threats
Malware hunters have stumbled upon a new Linux worm squirming through an old PHP vulnerability to infect hidden, Internet-enabled devices.
Application Security
UPDATE: Microsoft late Wednesday confirmed a Windows kernel zero-day vulnerability is being exploited in "limited, targeted attacks" against Windows XP users.
Malware & Threats
Security researchers at Symantec say the Blackshades malware is on the rise again roughly a year after the arrest of a key player associated...
Malware & Threats
Researchers at Kaspersky Lab say a sophisticated new banking threat is making the rounds in the cyber-underworld.
Malware & Threats
Apache Tomcat Server Backdoor Worm SquirmingMalware hunters at Symantec have intercepted a malicious backdoor worming its way though servers running the open-source Apache Tomcat...
Cybercrime
Security researchers at Trusteer are calling attention to a new malware toolkit that uses the I2P (Invisible Internet Project) networking layer to mask communications...
Malware & Threats
The Cryptolocker (also known as Crilock) ransomware attacks are showing no signs of slowing down with one anti-malware company counting more than 10,000 infections...
Malware & Threats
It may not always be a bull market on Wall Street, but it certainly seems to be one in the cyber underground when it...
Malware & Threats
Symantec has issued an alert to warn organizations about targeted attacks against a previously undocumented security hole in Ichitaro, a word processing software program...
Malware & Threats
Ducking detection once a malware infection is successful is a key part of life for an attacker. According to Symantec, a group of sophisticated...
Endpoint Security
Invincea, a provider of endpoint security solutions that leverage secure virtual containers to protect against advanced malware and other threats, this week announced the...
Cybercrime
LONDON - Dozens of London-based banks joined other financial institutions in the capital on Tuesday for a giant exercise to test their defenses against...
Malware & Threats
F-Secure Labs announced that it discovered 259 new mobile threat families and variants of existing families in the third quarter of 2013, according to...
Incident Response
According to a recent study from ThreatTrack Security, nearly 6 in 10 malware analysts at U.S. enterprises have investigated or addressed a data breach...
Malware & Threats
Microsoft released an advisory today warning users about a new zero-day under attack in targeted campaigns occurring in the Middle East and South Asia.
Malware & Threats
While the concept of sandboxing isn’t new, it wasn’t until a few years ago that it entered the mainstream network security vocabulary and enterprises...
Malware & Threats
A new study by researchers with Kaspersky Lab found that the number of attacks on their customers exploiting Java reached more than 14 million...
Malware & Threats
The First step in Defending Against Malicious Code Infections is Ensuring that a Strong Trust Infrastructure is in Place and Well Secured.
Malware & Threats
Researchers at Websense have uncovered an extensive cybercrime campaign using the Mevade malware that appears to be targeting businesses and government agencies in several...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)