Malware & Threats
Yahoo said it has closed a cross-site scripting vulnerability a researcher said left Yahoo Mail users susceptible to having their accounts hijacked – though...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Malware & Threats
Researchers at Trend Micro have detailed the inner workings of an ongoing attack campaign that for years has quietly been targeting organizations and institutions...
Malware & Threats
Researchers at Symantec say the waterholing attacks utilizing the recently-publicized Internet Explorer zero-day are tied to a gang responsible for a spate of similar...
Malware & Threats
Microsoft has pushed out a tool to help users address a zero-day vulnerability affecting Internet Explorer.
Malware & Threats
Trend Micro has spotted a piece of malware in the wild targeting Java-based HTTP servers and Java Servlet containers. According to Trend Micro, the...
Malware & Threats
Microsoft has issued a security advisory, and confirmed reports that a zero-day vulnerability in Internet Explorer has been used in targeted attacks. One such...
Malware & Threats
In August, Kaspersky Lab started an initiative to get the public’s help in cracking the encryption used in the payload of the Gauss malware....
Malware & Threats
A new ransomware scam has taken an interesting twist – rather than simply demanding payment, the attackers want the victims to fill out a...
Cyberwarfare
Tehran - A local civil defense official denied an earlier account that a fresh cyber attack on industrial units in the southern province of...
Malware & Threats
Talk that the Mayan calendar put the end of the world on Dec. 21, 2012, has produced everything from websites touting conspiracy theories to...
Cybercrime
Yesterday, SecurityWeek reported that the latest Apache-based rootkit was serving malicious links to the Sweet Orange exploit kit. As it turns out, the kit...
Malware & Threats
Last month SecurityWeek reported about the discovery of a malicious module on Linux that was injecting malicious iFrames into websites. This week, researchers from...
Malware & Threats
Carberp, a banking fraud Trojan, now has a variant that targets Android devices, researchers have found. Carberp-in-the-mobile, or “Citmo”, is primarily targeting Russian banks...
Cybercrime
Anti-Spam vendor Cloudmark recently spotted something new in the world of mobile threats: an Android-based SMS botnet. While the company describes the effort and...
Malware & Threats
Researchers at Symantec and Kaspersky Lab have confirmed the existence of malware that does nothing more than wipe the drive of the host where...
Malware & Threats
Apple has updated the anti-Malware signatures for Mac OS X after a new SMS installer scam was detected online by Russia’s Dr. Web earlier...
Incident Response
Effective Malware Response Requires Visibility and Control Across the Entire IT Environment and Along the Full Threat Lifecycle.In this business we must ask ourselves...
Malware & Threats
With the holiday season in full swing, and as shoppers rush out for those last minute gifts, a new type of malware is attempting...
Cybercrime
The U.S. Department of Justice said on Tuesday that they’ve arrested ten suspects involved in a global botnet operation that infected more than 11...
Malware & Threats
While Anti-Virus Solutions Are Effective in Fighting Widespread Malware, There is a Good Chance Newer Malware Will Evade Those Solutions.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)