Malware & Threats
Malware attacks are at an all-time high for the past four years as attackers adapt their attack methods to various platforms, McAfee Labs researchers...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Malware & Threats
Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands.
Malware & Threats
Shamoon is still busy infecting computers throughout the world, this time with an updated variant, according to new findings by Symantec. The new version...
Malware & Threats
Researchers at Kaspersky Lab have discovered financial malware in Brazil that are signed with valid certificates from Comodo. To make matters worse, the certificates...
Cybercrime
Late last week, SecurityWeek reported on a new Trojan Key Logger named “Admin.HLP” that captures sensitive user information and attempts to export it to...
Malware & Threats
Earlier this month, the world’s largest oil production company, Aramco, was attacked by the Shamoon virus. On Monday, a second attack forced one of Qatar's...
Malware & Threats
The group behind the Nitro attacks has joined the list of those exploiting a zero-day vulnerability in Java.
Malware & Threats
Malware Kaspersky Lab Shares Latest Findings from “Wiper” Investigation
Cyberwarfare
In mid July, Seculert discovered a new cyber-espionage weapon that was targeting organizations in the Middle East.
Malware & Threats
Enterprises Experience 643 “Advanced Malware” Infections Each WeekAccording to FireEye’s most recent threat report released today, organizations are seeing a massive increase in advanced...
Cybercrime
The zero-day in Java that SecurityWeek reported on Monday has gotten worse, as it can be targeted from within the Blackhole Exploit Kit and...
Malware & Threats
Radware Discovers “Admin.HLP” - A New Keylogger Used in Targeted Attack Security researchers from Radware have discovered a new Trojan Key Logger named “Admin.HLP”...
Malware & Threats
It's been over a month since the spam-spewing Grum botnet has been
Incident Response
Saudi Arabia-based Aramco was attacked earlier this month by malware that targeted some 30,000 workstations. According to the state-owned group which controls all of...
Malware & Threats
Security researchers from FireEye have discovered a new zero-day Java vulnerability that is being targeted in the wild. According to FireEye researcher Atif Mushtaq, the...
Malware & Threats
Security researchers from Websense have discovered a new malware campaign targeting BlackBerry customers. The malicious emails say that the recipient has successfully created a...
Malware & Threats
On Thursday, researchers at FireEye claimed a definitive link between Gauss and Flame, based on the connection between command and control (C&C) servers.
Malware & Threats
The password hints saved in Windows 7 and Windows 8 can be retrieved and decoded by attackers, two researchers have found.
Malware & Threats
Researchers at the University of Texas at Dallas say they have created a piece of malware that can pull together normally benign code from...
Malware & Threats
NEW DELHI - (AFP) - Twitter has agreed to remove six fake accounts which purport to be Prime Minister Manmohan Singh's following a request...
Malware & Threats
Researchers have identified targeted attacks exploiting the Flash Player bug Adobe patched just last week.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)