Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Researchers at Seculert have conducted an extensive analysis of the Ursnif banking Trojan and, in addition to finding a few improvements, they identified some mistakes made by the threat’s developers.

Marcel Lehel Lazar, the 44-year-old Romanian national known online as the hacker “Guccifer,” has been sentenced by a U.S. court to 52 months in prison for aggravated identity theft and unauthorized access to a protected computer.

Smartphone malware infections increased by 96% over the year to April 2016; smartphones account for 78% of all mobile infections; and the number of infected mobile devices peaked at 1.06% in April. These details come from the latest Nokia Threat Intelligence Report (PDF) for the first half of 2016, and demonstrate a rapidly increasing malware threat to mobile devices.

There is simply no denying that the adoption of open source components in software development is pervasive and will continue to expand. Black Duck, an open source security firm, noted in their “State of Open Source Security in Commercial Applications, 2016” report that 67 percent of the applications tested had some form of open source component.

The developers of the RIG exploit kit appear to be testing new infection methods and a different type of URL pattern for command and control (C&C) communications that could help the threat evade detection.

Nearly one million devices have been infected with a piece of malware and abused for distributed denial-of-service (DDoS) attacks, according to an analysis conducted by Level 3 Communications and Flashpoint.

As the Greek philosopher Heraclitus famously noted, “the only constant is change”. This statement was as accurate 2,500 years ago as it is now. The world around us changes constantly, often times at a somewhat frenetic pace. The field of information security is no different. Both the organizations we support and the threat landscape we face are changing and evolving constantly.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Artificial Intelligence

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.