Malware & Threats
Researchers at Symantec discovered hundreds of Android applications on Google Play being used as part of fraud scheme targeting Japanese users.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Incident Response
The Discovery of Botnets on our Enterprise Networks Can be an Indicator of an Advanced Targeted Attack.
Malware & Threats
A Boston-based merchant warned customers this week that a “sophisticated malware attack” had compromised some customers' credit and debit card information. An investigation was...
Cybercrime
Attackers Exploited Vulnerabilities in ATM Networks Connecting to Bank VPNs and GSM/GPRS Networks, Malware Infected ATMs and POS Systems to Steal Card Data.
Malware & Threats
New Attacks Targeting Tibetan and Uyghur Activists Found Using Android Trojan Targeted attacks against Tibetan and Uyghur activists are nothing new, but attackers appear...
Malware & Threats
McAfee has shared details of a new botnet circulating on criminal forums, mostly out of Russia, which targets payment card terminals connected to Windows...
Malware & Threats
Researchers at ESET have discovered a Trojan that initially focused on Windows users, but appears to be changing direction. The Trojan now has its...
Malware & Threats
Symantec says they have discovered a new variant of the TDL (Tidserv) family of malware that downloads the full legitimate Chromium Embedded Framework (CEF)...
Malware & Threats
Researchers at Symantec have discovered a third “wiper” malware linked to the recent attacks in South Korea. The malware used during the attacks have...
Malware & Threats
NASA has taken down a database of technical reports while it reviews determines the risk of sensitive documents being leaked following the arrest of...
Malware & Threats
Security Evasion and Customized Malware Has Become Mainstream for Attackers of all Skill Levels...
Malware & Threats
Study Showed Over 30% of Unknown Malware Connected to New or Unknown Internet Destinations. FTP Exceptionally High-risk, Rarely Detected.
Malware & Threats
Researchers at AlienVault shed some light on the evolution of the Sykipot malware attacks.The Sykipot attacks have exploited a number of zero-days during the...
Malware & Threats
A decade is a long time to escape detection, but that is roughly how long the TeamSpy attack may have gone on unseen.
Malware & Threats
While the motivation for the recent cyber-attacks against South Korean organizations remains unclear, researchers have identified the malware used as a data-wiping Trojan.
Cybercrime
On Wednesday, CrySyS Lab, the Laboratory of Cryptography and System Security at Budapest University of Technology and Economics, after being notified by the Hungarian...
Cybercrime
Researchers from MacAfee have uncovered a new variant of Android malware targeting banking customers in Italy and Thailand.
Malware & Threats
Security Explorations, a start-up from Poland credited with the discovery of several Java flaws, has turned one of their discoveries out to the public...
Malware & Threats
Attackers are using a new Adobe Reader exploit to target Tibetan and Uyghur activists to drop an advanced piece of malware, according to researchers...
Malware & Threats
Sophisticated attackers are expanding their reconnaissance methods to gain an advantage in their quest to compromise data. According to a new report from Mandiant...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)