Malware & Threats
Kaspersky Lab has uncovered details of an ongoing cyber-espionage campaign targeting South Korean think tanks.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Malware & Threats
Cyber-attackers have stepped up efforts to use the G-20 Summit as bait to snare users.
Malware & Threats
Microsoft is planning to release 14 security bulletins next week as part of its Patch Tuesday update, including four critical updates for Internet Explorer,...
Malware & Threats
Researchers at Kaspersky Lab say a sophisticated piece of Google Android malware is being blasted out via a mobile botnet spamming victims with text...
Malware & Threats
“Hesperbot” is an Entirely New Banking Malware Family With Advanced Features, Currently Targeting Users In Turkey, The Czech Republic, Portugal and the UK.
Malware & Threats
FireEye, the soon-to-go-public provider of threat protection solutions, today announced a new, real-time, continuous protection platform that leverages a combination of people, technology and...
Malware & Threats
Researchers at EMC's RSA Security Division slapped down the 'Hand of Thief' [HoT] banking Trojan in an updated analysis of the malware's capabilities.
Malware & Threats
New research from security firm FireEye is turning attention to Poison Ivy – a remote access tool (RAT) that may not make users itch,...
Malware & Threats
Researchers at Zscaler warned that the attackers behind the 'CookieBomb' attack are still hard at work compromising users through legitimate websites. CookieBomb is malicious...
Application Security
While obscuring website code, server architecture, and security mechanisms doesn’t provide bullet-proof security on its own, it can be effective...
Endpoint Security
Kaspersky Lab released the latest versions of its consumer-focused security solutions this week, including Kaspersky Anti-Virus 2014 and Kaspersky Internet Security 2014, both of...
Cybercrime
Central Tibetan Administration Website (Tibet.Net) Compromised In Watering Hole Attack
Malware & Threats
A recently patched zero-day vulnerability in the Joomla platform became an open gateway for attackers to compromise thousands of sites, according to findings by...
Cybersecurity Funding
Cyvera, a Tel Aviv, Israel-based security startup working on solutions to help block zero-day attacks, has raised $11 million in venture capital funding, the...
Malware & Threats
Malicious Web advertising has long been a way for attackers to compromise PCs, but now the technique appears to be making its way to...
Cybercrime
According to new research from soon-to-go-public security firm FireEye, the threat actors behind the attacks against the New York Times late last year appear to...
Cybersecurity Funding
In a much-anticipated move, FireEye has filed an S-1 registration statement with the Securities and Exchange Commission (SEC) for a proposed initial public offering...
Cybercrime
Researchers from RSA have uncovered a new banking Trojan designed to steal information from machines running the Linux operating system. Dubbed “Hand of Thief”,...
Malware & Threats
The amount of malicious and high-risk Google Android apps jumped by more than 40 percent during the past few months, according to a new...
Malware & Threats
More information is trickling out about a Firefox vulnerability used to compromise some users of the Tor network as speculation about the origin of...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)