Malware & Threats
The makers of the notorious Citadel Trojan continue to innovate, this time adding a new feature designed to help botmasters have smoother interactions with...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Cybercrime
Last week, Microsoft released the latest Microsoft Security Intelligence Report (SIR), which provided some interesting empirical insight into malware and how it is distributed on...
Malware & Threats
Web security firm, Websense, recently examined a small spam campaign that included variants of the Zeus Trojan that had little to no coverage by...
Cybercrime
A recent report from Blue Coat Systems, has revealed that the number of malicious networks – or "Malnets" – has tripled in the last...
Malware & Threats
If you and your co-workers are looking forward to Friday, you are not alone – phishers are looking forward to it as well. In...
Malware & Threats
The growth of software activation key generators is linked to the spread of malware, according to findings from Microsoft's latest Security Intelligence report. In...
Cybercrime
A Russian cyber-criminal going by the handle vorVzakone may be behind the plan to launch a series of Trojan attacks against financial institutions, Brian...
Cybercrime
Banking Trojans offered up via the BlackHole exploit kit created pages dominated the malware scene over the third quarter, according to a new threat...
Malware & Threats
Two lawmakers are asking the United States Food and Drug Administration to start thinking more about how to secure medical devices from cyber-attacks.
Malware & Threats
Researchers have discovered a new type of Man-in-the-Browser (MItB) attack that is Website independent, and does not target specific Websites, but instead collects data...
Cybercrime
October is National Cyber Security Awareness Month (NCSAM), but unlike previous years, 2012 kicked off with bad news.
Endpoint Security
On Monday, Symantec officially lifted the curtain on the 2013 version of Endpoint Protection for the Small to Medium-Size Business (SMB) market. Touting simplified...
Cybercrime
Hackers Breached An Adobe Server To Gain Access To Code Signing InfrastructureAdobe will be revoking a code signing certificate next week after discovering two...
Malware & Threats
A new study by NSS Labs found Microsoft Internet Explorer outstripped the competition when it came to protecting users from socially-engineered malware. Google Chrome...
Malware & Threats
While the world of malware creation may be mysterious to many, malicious apps that infect mobile devices are plentiful and easy to create. Because...
Cyberwarfare
A company that supplies remote administration and monitoring tools to the energy sector has warned customers it was a victim of sophisticated advanced persistent...
Cybercrime
DUBAI - An Islamist group on Tuesday said it will carry out new cyber attacks on US banking targets, according to SITE Intelligence Group,...
Malware & Threats
Some Twitter users are getting hit with a malware attack that is spreading through direct messages. The messages take a variety of forms, noted...
Cybercrime
Please join SecurityWeek and Symantec TODAY at 1PM ET / 10AM PT for an informational webcast on how you can protect your company's endpoints against...
Cybercrime
Businesses today cannot function at full capacity without Email. Criminals know this, and despite billions spent to protect corporate email, it’s the easiest way...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)