Malware & Threats
ESET today announced the availability of ESET NOD32 Antivirus 4 Business Edition for Linux Desktop and ESET NOD32 Antivirus 4 for Linux, the company's...
Hi, what are you looking for?
SecurityWeek
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Malware & Threats
According to a report released today by Commtouch, malware sent via email increased by 400% in the last week of March 2011. Commtouch says...
Malware & Threats
A new report from independent security testing organization NSS Labs, warns of two major flaws affecting industry leading firewalls, including a sneak attack that...
Malware & Threats
Adobe announced today that a critical vulnerability (CVE-2011-0611) exists in its Flash Player that could cause a crash and potentially allow an attacker to...
Malware & Threats
Mocana, a San Francisco based company that focuses on smart device security, recently released a study that tuned into the impact of security threats...
Malware & Threats
Conficker could have proved much more damaging than it ultimately did, but the threat has not entirely disappeared.
Cybercrime
Symantec this week released its latest Internet Security Threat Report which revealed that more than 286 million new threats, or malicious code, surfaced in...
Data Protection
Updated with Statement from Oracle (03/28/11 1:48PM EST) Oracle issued the following statement to SecurityWeek on Monday afternoon: "Security is one of Oracle’s greatest...
Malware & Threats
Fraudulent SSL Certificate WarningUS-CERT, Microsoft, Mozilla and other organizations have issued warnings regarding fraudulent (fake) SSL certificates being issued.According to the Comodo Group, Inc.,...
Cybercrime
This article is the second in a series describing the hottest commodities found in underground markets. In this column we continue to explore the...
Cyberwarfare
It appears that Canada’s Finance, Defense Research and Development departments, as well as the Treasury Board, were hacked in February by what the Canadian...
Incident Response
SecurID Breach - Many Looking for Answers after RSA Alerts Customers of Sophisticated Attack
Malware & Threats
PandaLabs, Panda Security's anti-malware laboratory, has found that the number of threats in circulation has risen, reporting a 26 percent increase in new threats...
Malware & Threats
Twitter Enables Option for HTTPS by DefaultFollowing a trend in allowing users to automatically utilize the secure HTTPS protocol when accessing Web based services,...
Malware & Threats
Adobe has issued a warning of a newly identified critical vulnerability in its Flash Player, and that the vulnerability is being exploited in targeted...
Malware & Threats
Today’s tragic events of the 8.9 magnitude earthquake and resulting Tsunami, as sad as it is, is a dream for scammers and fraudsters around...
Malware & Threats
According to recent statistics coming from Dasient, a firm that helps discover and combat Web-based malware, “malvertising,” a growing method used to distribute malware...
Malware & Threats
Statistics show Trojan.Win32.Generic!BT Holding as Number One Detection for FebruaryGFI Software has announced the top 10 most prevalent malware threats for the month of...
Malware & Threats
Related Tech Track: Mitigation of Security Vulnerabilities on Android
Funding/M&A
Google has acquired Zynamics, a small company based in Germany that provides software analysis tools to help with malware analysis using reverse engineering. Though...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)