Cybercrime
Researchers at Zscaler have discovered a fake YouTube page that is hosting malicious Chrome extensions. Such pages, as seen in the past, prey on...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Malware & Threats
Mac OS X Spyware Found On Users’ System Who Attended Oslo Freedom ForumResearchers found malware which acts as a backdoor for OS X on...
Malware & Threats
Despite four takedowns in five years, PushDo is back, complete with new features designed to make the botnet more resilient and elusive, researchers said.
Cybercrime
Cyber-criminals are actively updating the Travnet malware and improving the botnet's infrastructure to boost its document-stealing capabilities, researchers found.
Malware & Threats
The two card payment processors compromised by hackers as part of a massive international fraud scheme have been identified as ElectraCard Services and enStage,...
Cybercrime
Researchers have discovered a new backdoor targeting Apache on cPanel-based servers. The attackers have replaced the Apache binary with a malicious one in such...
Malware & Threats
Researchers at Microsoft are reporting a wave of malicious browser extensions attempting to hijack Facebook profiles. The malware, known as Trojan:JS/Febipos.A, specifically targets Google...
Cybercrime
Microsoft on Wednesday released a one-click Fix it to help protect customers from a recently-disclosed security vulnerability (CVE-2013-1347) affecting Internet Explorer 8 that was used...
Cybercrime
Several media sites, including two Washington, DC-based radio stations, have been compromised to infect unsuspecting visitors' systems with fake antivirus software.
Malware & Threats
Attackers are targeting a zero-day vulnerability in Microsoft Internet Explorer in a campaign that has hit as many as 10 different websites, including the...
Malware & Threats
According to a new report from Panda Labs, 80% of the malware infections discovered in Q1 2013 were Trojans. These numbers are similar to...
Cybercrime
Two weeks ago, hackers were able to compromise the password of the Associated Press Twitter account, allowing the hackers to send out fictitious tweets...
Malware & Threats
A new version of the Java exploit kit g01pack has added a second stage to the exploit process in order to bypass detection by...
Cybercrime
WASHINGTON - An Algerian sought in connection with the "SpyEye" computer virus designed to steal financial and personal information was extradited by Thailand to...
Malware & Threats
A new variant of the Ramnit malware is targeting is targeting bankers in the UK with a one-time password [OTP] scam, another example of...
Cybercrime
The United States' Department of Labor's Website has been breached and is serving up malware in drive-by-download attacks, security researchers warned.
Cybercrime
Spam messages claiming to link to an invoice, shopping receipt, airline ticket, or some other type of confirmation document was the predominant mode of...
Cybercrime
In its Q1 2013 roundup, Trend Micro said that zero-day vulnerabilities, in addition to concentrated attacks that cause high-damage, such as those in South...
Cybercrime
Just five days after Oracle released the patches, criminals have added exploits for Java’s recent flaws to their kits. Security firm F-Secure spotted the...
Malware & Threats
A malicious campaign that started last summer is once again targeting Uyghur activist groups in China. The latest developments in this year-long fight is...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)