Malware & Threats
Researchers have identified targeted attacks exploiting the Flash Player bug Adobe patched just last week.
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Malware & Threats
Many users are downloading the fake versions of Flash Player for Android on their mobile devices, according to GFI Labs.
Incident Response
Researchers Say Crisis May be the First Malware that Attempts to Spread Onto a Virtual Machine
Malware & Threats
Resilient "SMSZombie" Exploits China Mobile's Payment System - Over 500,000 Android Devices Infected, Firm Says.
Malware & Threats
"Disttrack" Malware Used Shamoon Attacks, Renders Hard Disks On Infected Systems Unusable
Malware & Threats
Saudi Aramco, Saudi Arabia’s national oil company and the largest in the world, has confirmed that is has been hit by a cyber attack...
Cybercrime
Cyber-criminals are increasingly crafting attacks and targeting specific employees to maximize their ill-gotten gains. Who better to target than the folks who manage lots...
Malware & Threats
CrowdRE, The Crowdsourced Reverse Engineering Platform Adds Mac and Linux Support, Groups With Sharing Controls
Cyberwarfare
Researchers at Kaspersky Lab are asking for help peeling back the layers covering a mysterious payload of the Gauss malware.
Malware & Threats
Trusteer is reporting that they have discovered a new attack utilizing the Citadel Trojan. According to a blog post from the security firm, Citadel...
Malware & Threats
The malware responsible for attacks on at least 30 local governments, universities, and businesses in the Netherlands, Dorifel (XDocCrypt), is still actively spreading and...
Malware & Threats
If Your Organization Has Information That is Valuable Enough to Keep Private, Then There is Value For An Attacker in Stealing It...
Endpoint Security
Towards the end of July, anti-Malware vendor Intego broke the story of Crisis, the name given to a Trojan that targets Mac OS X....
Malware & Threats
Security researchers at Trusteer have uncovered another a new variant of new financial malware with advanced evasive capabilities.
Cyberwarfare
Researchers have uncovered another attack exploiting a Java vulnerability against activists and government agencies in Nepal. The attack resulted in a backdoor being installed...
Malware & Threats
There are signs that the FinFisher "lawful interception" spyware may be installed on command-and-control computers in at least ten different countries, including the United States, according...
Malware & Threats
The number of malicious websites identified by Symantec has inched upward in the past month to 2,189 websites per day, according to the company's...
Cybercrime
BotoPedia, a site similar to Wikipedia, but focusing on bots (both good and bad), made its debut today. It’s the brainchild of Incapsula, a...
Malware & Threats
One of the central figures believed to have been behind the Mariposa botnet is on trial in Slovenia. The suspected mastermind of the botnet,...
Malware & Threats
Security researchers have identified new Zeus malware samples targeting Android and BlackBerry devices.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)