Cybercrime
Threats from Internationalized Domain Names (IDNs)
Hi, what are you looking for?
SecurityWeek
Malware & Threats
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached...
Malware & Threats
Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands.
Malware & Threats
GFI Software today announced the top 10 most prevalent malware threats for the month of September 2010.
Funding/M&A
Acquisition Expands Company’s Research Capabilities for IDS/IPS and Malware DetectionQualys, a provider of on demand IT security risk and compliance management solutions, today announced...
Cybercrime
iTunes Users Targeted in Massive Phishing AttackUpdated - 12:25AM 10/5/2010
Cyberwarfare
Brazilian Army Operational Agents to Be Trained for the Fight Against Cyber terrorism, Online Crime and Strategic Preparation for Cyberwarfare
Audits
A new report released today by IT security giant McAfee indicates that while organizations see the potential value of Web 2.0 tools, decision makers...
Cybercrime
Update - 10/12/10 9:50AM - There have been reports that this attack used "Bugat" Malware in addition to Zeus
Malware & Threats
Over the weekend, researchers from Fortinet and S21cec came across a new mobile malware piece they have named SymbOS/Zitmo.A!tr, or “Zitmo,” standing for “Zeus...
Malware & Threats
Stuxnet - Win32/Stuxnet - Analysis and Global Infection Rates
Malware & Threats
CyberPatriot - Cyber Defense Competition Draws Over 450 Teams From Across The Nation The Air Force Association announced today that CyberPatriot, a cyber defense...
Compliance
State of Software Security Report Evaluates Security of Web Applications
Malware & Threats
Qualys today announced the release of the second annual “Top Cyber Security Risks Report.” featuring new data from HP TippingPoint DVLabs, SANS Institute and...
Malware & Threats
One third of small-to-medium-sized businesses (SMBs) experienced a malware or virus infection via social networks through July of this year, and 23 percent actually...
Malware & Threats
McAfee today announced the discoveries in its 2010 “Digital Music & Movies Report: The True Cost of Free Entertainment” revealing a growing number of...
Malware & Threats
Iraqi Resistance Group Claiming Responsibility for 'Here You Have' Virus May be Based in Spain. Virus gained Momentum but Slowed Quickly.After intensive investigation of...
Malware & Threats
“Here you have” Virus – Details and Removal Methods (W32/VBMania@mm / W32.Imsolk.B@mm)
Malware & Threats
Clickjacking Scams Continue to Target Facebook Users. "Cheerleaders Gone Wild" Scam Lures Users to "Like" Without KnowledgeYet another “clickjacking” scam is spreading on Facebook...
Endpoint Security
Norton 2011 - High Scores in Malware Detection but also High Scores in False Positives
Fraud & Identity Theft
In a recent investigation, it was discovered that cybercriminals are creating 57,000 new “fake” websites each week looking to imitate and exploit approximately 375...
Malware & Threats
Snoop Dogg’s partnership with Symantec isn’t off to a great start. Just two days after announcing the “Hack is Wack” rap competition, the HackIsWack.com...
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)