Malware & Threats
Researchers from FireEye shared details on Monday of an attack that appears to be after targets in Russia, and seems to be originating from...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Malware & Threats
Researchers at EMC's RSA security division say evidence that the Citadel Trojan is slowly being pulled from underground markets continues to pile up.
Cybercrime
The Miami Family Medical Center in Queensland Australia has been victimize by Ransomware, which has forced them to take extreme measures in order to...
Malware & Threats
Moscow-based Kaspersky Lab on Monday released its annual security bulletin, a report that reveals statistics on malware and cyber-threats detected by its Kaspersky Security...
Malware & Threats
Facebook users are being targeted by a Christmas-themed scam that hijacks the reputation of well-known companies such as Walmart, Visa and Best Buy.
Malware & Threats
Researchers from Rapid7 and the Shadowserver Foundation discovered something unique last week. While browsing files on USENET, they discovered a botnet that has thousands...
Malware & Threats
Cybercriminals and the markets they use have changed in 2012, with both tactics for controlling attack campaigns as well as hackers' marketing and sales...
Malware & Threats
New malware targeting Mac users has been discovered on a website associated with the Dalai Lama."Acting on a tip, a member of our Threat...
Malware & Threats
The Japan Aerospace Exploration Agency (JAXA) has said that it is investigating a potential data leak related to its Epsilon rocket after Malware was...
Malware & Threats
If you’re an administrator or security team member for your organization’s network, you’ve likely heard about the Crisis malware at some point in your...
Malware & Threats
In the latest round of testing and certifications performed by AV-Test.org, Microsoft’s Security Essentials (MSE) failed to meet the requirements for dealing with zero-day...
Malware & Threats
Piwik, an open source alternative to Google Analytics, announced on Tuesday that they had suffered a security breach, and the attacker inserted a backdoor...
Malware & Threats
The Shylock financial malware has added new evasive capabilities, Trusteer researchers have found.
Cybercrime
Security testing firm NSS Labs has released the latest results from its web browser security comparative series, which this time evaluated the effectiveness of...
Cyberwarfare
According to a recent study performed by B2B International on behalf of Kaspersky Lab, approximately 50 percent of organizations globally (even more in the...
Malware & Threats
Officials on Iran's computer emergency response team poured cold water on alerts about a strain of malware security researchers have warned is infecting databases...
Malware & Threats
Malware Modifies, Deletes Business SQL DatabasesSymantec researchers said they have discovered new malware that targets corporate databases, but doesn’t actually have data-stealing capabilities. Instead,...
Malware & Threats
A security researcher has developed a proof-of-concept malware capable of remotely accessing smart card readers on Windows machines.
Malware & Threats
Symantec researchers have discovered a piece of malware that leverages Google Docs to communicate with its command-and-control (C&C) server. The malware is a version...
Cyberwarfare
Defending Against Complex Cyber Attacks Requires a Radical Approach to SecurityBROOKLYN, NY—While security researchers have unraveled many of the mysteries surrounding Stuxnet, Flame, Duqu,...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)