Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
The goal of the attack is to circumvent the mobile transaction number authentication mechanisms used by banks, according to ESET.
According to researchers at Mandiant, now a unit of FireEye, an attacker was able to leverage the Heartbleed vulnerability against a customers’ VPN appliance and hijacked multiple active user sessions.
A report from the GAO highlights cyber-security issues tied to the SEC's lack of oversight of a contractor during a system migration.
Security vulnerabilities in many satellite telecommunications systems leave them open to hackers, raising potential risks for aviation, shipping, military and other sectors.
The update includes fixes for critical vulnerabilities in Java SE and other products.
A new survey of nearly 600 IT pros found that it takes on average 140 days to find breaches due to SQL injection attacks and 68 days to remediate them.
Web browsers may be overloaded by the overhaul of security certificates, leading to error messages and impacting Web performance.
Dell SecureWorks has added Advanced Endpoint Threat Detection (AETD) as the latest solution in its Advanced Threat Services portfolio.
British parenting website Mumsnet is the latest organization to have been hacked due to the "Heartbleed" bug, founder Justine Roberts revealed.
Akamai Technologies admitted some custom code it thought protected users against the Heartbleed vulnerability is flawed.
- 1 of 112
- ››
FEATURES, INSIGHTS // Virus & Threats
A threat is the agent that takes advantage of a vulnerability. This relationship must be a key factor in the risk assessment process and can no longer be treated as risk’s neglected step child.
Many continue to click on links or attachments sent via email without taking any steps to verify the origin of the email or the validity of the link or attachment. It only takes one click to for an attacker to establish a foothold in the target’s systems.
Here are five things I recommend security pros keep in mind when navigating the line between tight security and keeping the organization running at peak proficiency.
Whether you’re buying a smart refrigerator for your home or a printer for your company, your first step is deciding the risk involved and how to deploy the device in a secure manner while preserving the functionality you require.
Predictive security narrows the scope considerably and helps IT and security pros zero-in on the most likely vulnerabilities and areas most-at-risk due to the sensitive nature of the data they hold.
Vulnerabilities are a fact of life. Independent testing may be illegal without express permission, but that doesn’t stop code pillagers from sniffing out vulnerabilities and weaknesses in your web applications.
Social engineering attacks can happen at any time. Here are some strategies you can use to help reduce the chances of a successful social engineering/phishing attack you or your organization.
Without putting vulnerabilities into the context of the risk associated with them, organizations often misalign their remediation resources.
Complacency is never a good thing, but in security it can have devastating effects. While it’s good to acknowledge progress, that should never stand in the way of staying ahead of the next potential threat.
Just as offices need to detect break-ins to keep criminals from committing industrial espionage, enterprises need to put more focus on detecting APTs and other advanced threats to keep adversaries from their network.
- 1 of 13
- ››
Subscribe to SecurityWeek
- Bad Bot Percentage of Web Traffic Nearly Doubled in 2013: Report
- AIG Expands Coverage to Include Physical Damage Caused By Cyber Attacks
- Brazil Hosts Meeting to Craft Internet Governance Rules
- Apple Issues Slew of Security Updates for OS X, iOS
- 150 Million Downloaded Android Apps Vulnerable to Heartbleed: FireEye
- Security is a Marathon
- Brazil Passes Trailblazing Internet Privacy Law
- NIST Pulls Dual_EC_DRBG Algorithm from Random Number Generator Recommendations
- DDoS Attacks Prove Costly, Could Top 800 Gbps in 2015: Research
- Cyber Risks Can Cause Disruption on Scale of 2008 Crisis: Study
Copyright © 2014 Wired Business Media. All Rights Reserved. Privacy Policy | Terms of Use