Malware & Threats
Attackers are exploiting a vulnerability in a popular Website configuration tool to gain remote access to Web servers, Cisco researchers said in an advisory.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Malware & Threats
Seculert, a malware detection company in Israel, has released a free version of its cloud-based flagship product, which promises to protect organizations from advanced...
Cybercrime
Malware has always been a global effort, and that hasn't changed in recent years, as FireEye identified C&C servers in over 180 countries pushing...
Malware & Threats
Researchers at Trusteer say a notorious piece of financial malware is now hitting Twitter with a new mission – to break into the accounts...
Malware & Threats
Lookout, a mobile security firm in San Francisco, has discovered a new family of malware targeting Android, and based on Google Play stats –...
Malware & Threats
Google is adding an additional layer to Chrome’s defenses, which are designed to prevent potentially unwanted extensions from being installed. The latest enhancements build...
Malware & Threats
Cybercriminals are taking advantage of news about the bombings at the Boston Marathon and Wednesday's explosion at a fertilizer plant in Texas in an...
Endpoint Security
Microsoft released new data today as part of its latest Security Intelligence Report volume 14 (SIRv14), which showed that 2.5 out of 10 computers...
Malware & Threats
Researchers from Seculert have discovered a new malware they dubbed "Magic", due to "magic code" used within a custom communication protocol that the threat...
Cybercrime
Kaspersky Lab has discovered a link between the Chinese hackers blamed for a series of attacks against gaming companies, and an ongoing watering hole...
Endpoint Security
A majority of game hacks and software freely available online contain malware, according to new research.
Malware & Threats
Moscow-based Kaspersky Lab on Thursday unveiled its analysis on a series of targeted attacks that hit numerous online gaming companies around the world.
Malware & Threats
ZeroAccess Botnet Adding 100,000 New Infections Per Week, Almost 3 Million IP Addresses Reporting Infections.
Cybercrime
Identity and information security solutions firm Entrust, on Tuesday announced updates to its Entrust IdentityGuard Mobile Smart Credential offering.
Malware & Threats
Renault Partners with AVG Technologies to Secure its New Automotive App Store
Cybercrime
First discovered in 2011, the Shylock banking Trojan affects virtually all versions of Windows from Windows 2000 onward, and has turned into one of...
Cybercrime
Russian authorities claim to have the mastermind behind the Carberp banking Trojan and other members of the criminal gang in custody.
Cybercrime
Malicious SSHD Backdoor Allows Remote Attackers to Upload and Configure Malicious Apache Modules on Web ServersAn estimated 20,000 legitimate Websites running Apache's Web server...
Malware & Threats
New Report Shows Advanced Cyber Attacks Occur Up To Once Every Three MinutesThree minutes – that's all it takes.
Malware & Threats
A new sophisticated threat campaign is taking an extra step to fight off malware analysis.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)