Fraud & Identity Theft
Out of Band Authentication - How Fraudsters Circumvent Sophisticated Security Measures
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Malware & Threats
Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands.
Malware & Threats
Mobile Threats a Top Concern in 2011 According to Several Industry ReportsThreats targeting the fast growing smartphone and tablet markets top the list of...
Endpoint Security
Adobe this week announced the availability of its new Acrobat X Family of products, including Adobe Reader X as well as Acrobat X Suite,...
Cybercrime
In its monthly online fraud report, RSA researchers shed some light on the latest evolution of the Zeus Trojan – Zeus 2.1 – which...
Endpoint Security
Majority of Americans Have Abandoned an Online Purchase Due to Security Concerns, Poll FindsAccording to a national poll released today by the National Cyber...
Endpoint Security
Report Lists Top Applications With Security Vulnerabilities But Doesn't Provide a True Representation of Which are Really The Most DangerousA report released this week...
Cybercrime
Advanced Persistent Threat (APT) - What happens when APT Meets industrialization?
Cybercrime
5.4 percent of all PCs compromised in 2010 were infected with a fake antivirus
Malware & Threats
Application Security
A report released today by Imperva, a provider of data security solutions, shares predictions on what we could expect to see in 2011 and...
Malware & Threats
Update - The company has since released a beta version of the Nevercookie plug-in
Malware & Threats
Researchers Predict Advanced, Blended Threats, Laser-Focused on Attacking Business and InfrastructureWeb security researchers say that recent evidence and metrics suggest that cybercriminals and their...
Malware & Threats
Update 1:23PM EST (11/10/10) - Facebook has confirmed the issue was on their end. A representative confirms in an email to SecurityWeek: "We began...
Malware & Threats
Students and professors at Washington State University arriving for class last Friday morning were greeted with a surprise video message on classroom video screens,...
Malware & Threats
Hospitals Are Not Protecting Patient Data; Healthcare Industry Lagging Behind HITECH Standards
Endpoint Security
Blue Coat Systems, Inc. today announced that its Blue Coat PacketShaper appliances are now capable of delivering instant awareness of Web applications and content using...
Malware & Threats
BlackSheep Extension Helps Identify FireSheep Session Hijacking
Application Security
Location Labs Inc., a provider of mobile location-as-a-service infrastructure and applications, today announced the launch of Sparkle, a next-generation mobile location, controls, and security...
Malware & Threats
A few days ago I got back from an AMTSO workshop in Munich. AMTSO is the Anti-Malware Testing Standards Organization, and I also wrote...
Funding/M&A
Webroot today announced it has acquired Prevx, a UK based provider of cloud-based anti-malware solutions.Prevx provides cloud-based antivirus protection and behavior-based malware detection, helping...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)