Cyberwarfare
The hacker group calling itself “Shadow Brokers” has released another round of exploits and tools allegedly used by the NSA-linked threat actor “Equation Group,”...
Hi, what are you looking for?
SecurityWeek
Mobile & Wireless
The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.
Mobile & Wireless
The most severe is a critical flaw in Framework leading to remote code execution without user interaction.
Mobile & Wireless
Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones.
Cybercrime
The individuals called victims and persuaded them to install an app and scan their credit cards to loot their bank accounts.
Mobile & Wireless
The Triada malware, said last year to be the most advanced mobile threat, recently boosted its detection evasion capabilities with the adoption of sandbox...
Data Protection
An update released this week by Apple for the Apple Music application for Android addresses a certificate validation issue that can be exploited to...
Mobile & Wireless
Google this week released security updates for Android to resolve numerous Critical remote code execution (RCE) and elevation of privilege (EoP) vulnerabilities in the...
Mobile & Wireless
Vulnerabilities in Broadcom’s Wi-Fi system-on-chip (SoC) can be exploited to hijack iPhone, Nexus, Samsung and other smartphones without requiring any user interaction.
Mobile & Wireless
Apple has released an emergency security update for its iOS operating system to address a serious vulnerability affecting the Wi-Fi component.According to the tech...
Mobile & Wireless
A newly discovered Android ransomware family employs heavy obfuscation and delayed activation of malicious functionality to ensure it can evade anti-virus solutions, Zscaler security...
Management & Strategy
Google reported last week that its Project Zero Prize contest was not as successful as the company hoped it would be – no valid...
Mobile & Wireless
President Donald Trump has a new phone. An iPhone.That would not ordinarily be news, but given the security concerns about the risk of hack...
Malware & Threats
Researchers have published a paper describing how a piece of malware planted on an air-gapped network can be controlled remotely using an office scanner...
Mobile & Wireless
A third-party app store application managed to slip into the official iOS App Store by masquerading as a legitimate financial helper application, according to...
Incident Response
Android Forums, one of the most popular online Android communities, informed members this week that the server hosting its website has been breached, allowing...
Incident Response
Apple Tells WikiLeaks to Submit CIA Exploits Through Normal ProcessApple’s initial analysis of the iPhone and Mac exploits disclosed by WikiLeaks on Thursday shows...
Endpoint Security
Mobile & Wireless
Google Outlines State of Android Security With 2016 Year In Review Report
Mobile & Wireless
Google recently discovered and blocked a sophisticated fraud botnet that was being distributed through multiple channels and which employed several methods to avoid detection.
Mobile & Wireless
Android devices containing pre-installed malware were recently discovered on 38 mobile devices belonging to two large companies, according to security firm Check Point.
Mobile & Wireless
One of the issues that Google addressed earlier this week with the release of a new set of security patches for Android could render...
Cyberwarfare
WikiLeaks this week released information on what it claims to be a trove of CIA hacking tools. The documents made public appear to show...
Mobile & Wireless
Researchers have disclosed a new attack method that can be leveraged to track mobile devices that rely on Media Access Control (MAC) address randomization...
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)