Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

One of the Windows features that has been long abused by cybercriminals is the Windows Background Intelligent Transfer Service (BITS), and researchers at SecureWorks warn that a lesser-known capability in BITS is now leveraged to download malware.

Cloud computing remains a problem for many businesses. While the move to IaaS is gathering pace, it is still true that most organizations operate a hybrid approach, combining cloud apps and on-premise data. According to Egnyte, 85% of apps are now in the cloud, while 85% of data is still on premises. This creates a huge governance issue as corporate data moves into and out of cloud applications.

Network security company Fortinet (FTNT) announced on Tuesday the acquisition of AccelOps, a Santa Clara, CA-based firm that specializes in network security monitoring and performance analytics solutions.

Brian Richard Farrell, a 27-year-old accused of being a key administrator of the dark web criminal marketplace Silk Road 2.0, has been sentenced to eight years in prison and four years of supervised release.

Researchers discovered that Facebook Messenger is plagued by a vulnerability that allows hackers to replace the content of the messages they send through the application. The social media giant addressed the issue, but rated it “low risk.”

The blame game over who should be held responsible for the bank thefts via SWIFT continues. Ecuador's Banco del Austro (BDA) has already launched action against Wells Fargo for releasing $12 million to accounts largely in Hong Kong, claiming it failed to respond to red flags in the transactions.

Angler, currently considered the most sophisticated and most successful exploit kit, has been observed delivering Flash and Silverlight exploits capable of evading Microsoft’s Enhanced Mitigation Experience Toolkit (EMET).

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Artificial Intelligence

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.