Malware & Threats
Just over a year after it was initially discovered, Flashback is extinct. The death declaration comes from ESET, who has recently published a report...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Malware & Threats
Researchers at Symantec have discovered malware that has been written using Google’s Go programming language. Go was introduced by Google in 2009, two years...
Cybercrime
Please join SecurityWeek and Symantec TODAY at 1PM ET / 10AM PT for an informational webcast on how you can protect your company's endpoints against...
Malware & Threats
The ZeroAccess rootkit used to be a problematic kernel-mode family of malware that was hard to remove; new versions of the malware itself have...
Malware & Threats
IBM's X-Force 2012 mid-year report found a sharp increase in browser-related exploits, Mac-based attacks, and SMS related scams. Since its last Trend and Risk...
Funding/M&A
EMC said today that it has acquired Montreal-based Silicium Security, a developer of endpoint monitoring technology that helps security teams detect and mitigate unknown and...
Cybercrime
According to research from security firm AlienVault, there appears to be a connection between the "PlugX" gang out of China and the latest Internet...
Funding/M&A
Google has always had a sharp nose for rising Internet trends. Just recently, the search giant announced that it had acquired VirusTotal, an anti-malware...
Endpoint Security
TAIPEI - (AFP) - Nearly 1,000 civil servants in Taiwan must take classes in cyber security after falling for a trap set up by...
Cybercrime
TDL4, also known as TDSS in some circles, is a Root Kit that targets the MBR (Master Boot Record) and is nearly impossible to...
Malware & Threats
Journalists in Beijing are being sent malicious email attachments, which would enable a backdoor into their systems. This latest round of attacks on reporters...
Malware & Threats
Update: Microsoft Offers Guidance for Internet Explorer Zero-Day
Malware & Threats
Microsoft scored another legal victory in its legal assault against botnets this week after a court gave the company the OK to seize control...
Malware & Threats
A new version of the Black Hole exploit kit has been released with updated features designed to fight off efforts by security researchers to...
Application Security
Threat prevention provider FireEye, and Splunk, the recently gone public provider of software that helps organizations gather and make use of machine data from...
Malware & Threats
The Disttrack/Shamoon malware, while destructive, appears to be the work of amateurs and not elite and sophisticated developers, according to the latest analysis.
Endpoint Security
Wave Systems' new endpoint security product relies on a chip on the computer's motherboard to detect malware infections.
Malware & Threats
The anti-Virus firm that discovered the Flashback Trojan, Dr. Web, has discovered another family of Mac-based malware that targets passwords. In addition to Mac...
Cybercrime
Back in early 2010, Google announced it had been a victim of a persistent and sophisticated attack conducted over a sustained period of time....
Funding/M&A
Google Broadens Its Security Insight With Acquisition of VirusTotalGoogle has acquired VirusTotal, the popular service that lets users analyze suspicious files and URLs to...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)