Malware & Threats
Chances are you’ve never heard of Dr. John Snow. But the methods he used more than 150 years ago to solve the mystery of...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Endpoint Security
Trusteer's new exploit prevention platform protects enterprises from zero-day and social engineering attacks from successfully compromising endpoints.
Malware & Threats
A rogue Google Chrome extension, a fake version of Adobe Flash Player and some Facebook "Likes" are at the center of a scam recently...
Cybercrime
Apple on Tuesday acknowledged that Mac OS X computers at the Cupertino, California-based company were attacked and infected with malware. The attack is assumed...
Malware & Threats
The Burger King slogan to "Have it Your Way" probably was not meant as an invitation for hackers, but apparently there are those who...
Malware & Threats
According to a recent study from ISACA, one in five enterprises have experienced an APT attack. In addition, 94 percent of the 1,500 IT...
Cybercrime
For at least six weeks, a subdomain for the Los Angeles Times was redirecting visitors to a separate domain hosting the Blackhole Exploit Kit....
Malware & Threats
Researchers have observed a recent spike in attacks against the Uyghur community to monitor their email and chat activities, according AlienVault and Kaspersky Lab.
Malware & Threats
More malicious Websites were spotted in 2012, and most of them weren't found in the seedier parts of the Internet, according to a recently...
Malware & Threats
Multi-platform Malware Poses Threat to Android and Windows Users
Cybercrime
Cyber-criminals increasingly targeted retailers more than any other sector in 2012, Trustwave said in its latest report.
Malware & Threats
The ZeroAccess botnet closed out 2012 as the most active botnet in the wild, according to a malware report from security vendor Kindsight.
Malware & Threats
The name BlackHole looms large over the marketplace for crimeware kits, but a new player is said to have emerged with similar code and...
Malware & Threats
Microsoft and Symantec teamed up to takedown a notorious botnet tied to click fraud activity on the Web.
Malware & Threats
SpeedTest.net, a free service that tests the performance of Broadband connections, was compromised and made to serve malware, according to security vendor Invincea. The...
Malware & Threats
Google blacklisted the domain of netseer.com in response to a malware attack on the site, triggering a chain reaction that led to a number...
Malware & Threats
Network security firm Fortinet released its latest threat report Monday, which covers trends and observations from Q4 2012, including four types of malware aimed...
Malware & Threats
A recently discovered piece of malware is using Google Android as a launch pad to turn Windows PCs into listening devices.
Malware & Threats
Following the recent launch of its highly anticipated BlackBerry 10 operating system and new handsets last week, BlackBerry on Monday announced that it has...
Cybercrime
The Carberp Trojan, which has been around for years and has been proven able of bypassing layered defenses, has made a comeback of sorts....
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)