Security Experts:

WRITE FOR US
Virus & Threats

LATEST SECURITY NEWS HEADLINES

rss icon

200 Million Sets of Japanese PII Emerge on Underground Forums
F-Secure Unveils New Endpoint Detection & Response Solution
Misconfigured CalAmp Server Enabled Vehicle Takeover
Chrome to Issue Red "Not Secure" Warning for HTTP
Man Sentenced to 15 Years in Prison for DDoS Attacks, Firearm Charges
long dotted

NEWS & INDUSTRY UPDATES

Critical Code Execution Flaws Patched in Advantech WebAccess
Nearly a dozen vulnerabilities, including critical code execution flaws, patched in Advantech’s WebAccess HMI/SCADA product [Read More]
Critical Command Injection Flaw Patched in Red Hat Linux
A critical vulnerability in the DHCP client in Red Hat Enterprise Linux could allow an attacker to execute arbitrary commands on impacted systems. [Read More]
Malicious PDF Leads to Discovery of Adobe Reader, Windows Zero-Days
Researchers came across a malicious PDF file that exploited zero-day vulnerabilities in Adobe Reader and Windows [Read More]
Severe DoS Flaw Discovered in Siemens SIMATIC PLCs
High severity vulnerability discovered in Siemens SIMATIC S7-400 PLCs can be exploited remotely to cause devices to enter a DoS condition [Read More]
Flaws in Open Source Components Pose Increasing Risk to Apps: Study
As the adoption of open source components soars, vulnerabilities in this type of software have become increasingly common and they can pose a serious risk to applications, Synopsys study shows [Read More]
Signal Flaw Allowed Code Execution With No User Interaction
Critical vulnerability in the Signal desktop app allowed remote code execution with no user interaction. Researchers show how hackers could have stolen conversations and more [Read More]
Adobe Patches Two Dozen Critical Flaws in Acrobat, Reader
Adobe patches nearly 50 vulnerabilities in its Acrobat and Reader products, including critical code execution flaws [Read More]
Security Gaps Remain as OT, IT Converge
The integration of new IT networks with older operational technology (OT) networks is introducing new security risks to old technology and old technology practices. [Read More]
Emails Encrypted With OpenPGP, S/MIME Vulnerable to New Attacks
EFAIL: researchers say they’ve found ways to steal plain text from emails encrypted with OpenPGP and S/MIME, but some believe the claims are overblown [Read More]
Code Execution Flaw in Electron Framework Could Affect Many Apps
The Electron framework, which has been used to build several highly popular applications, is affected by a flaw that can allow remote code execution [Read More]

FEATURES, INSIGHTS // Virus & Threats

rss icon

Oliver Rochford's picture
Cyber War and the Compromise of Reliable Full Disclosure
Oliver Rochford - Vulnerabilities
We can’t rely on our own governments to practice responsible full disclosure. Full Disclosure is compromised. We can’t really blame them. Either everyone discloses, or no-one does.
Read full story
Josh Lefkowitz's picture
Preventing Business Email Compromise Requires a Human Touch
Josh Lefkowitz - Email Security
Even organizations with the most robust defense solutions and advanced automated technologies cannot effectively combat threats such as BEC without the adequate support and nuanced expertise of humans.
Read full story
Jack Danahy's picture
The 3 Biggest Malware Trends to Watch in 2018
Jack Danahy - Email Security
To mitigate the risk of attacks, IT teams should disable unused tools and components, while deploying endpoint protection that doesn’t rely solely on file scanning or whitelisting.
Read full story
Markus Jakobsson's picture
It Takes a Village: The Importance of Security Standards
Markus Jakobsson - Email Security
DMARC is an email authentication standard designed to eliminate phishing and other types of attack that use spoofing to misrepresent an email sender identity.
Read full story
Ashley Arbuckle's picture
Embracing the Cultural Shift that Comes with Secure DevOps
Ashley Arbuckle - Vulnerabilities
By understanding and easing the cultural shift this entails, you can save time and money and sleep better at night with security occupying a seat at the DevOps table.
Read full story
Travis Greene's picture
Security and DevOps - What We Learned at DOES17
Travis Greene - Vulnerabilities
As DevOps and agile development methodologies take greater root in the enterprise, the traditional tools and approaches for eliminating vulnerabilities in code will no longer be able to keep pace.
Read full story
Dan Cornell's picture
Common Approaches to Automated Application Security Testing - SAST and DAST
Dan Cornell - Vulnerabilities
When planning a testing strategy for an application, it is important to evaluate the applicability and likely effectiveness of the various testing approach options.
Read full story
David Holmes's picture
Stack Ranking SSL Vulnerabilities: The ROBOT Attack
David Holmes - Network Security
Several tech vendors have been added to the list of vendors vulnerable to a variation on the Bleichenbacher attack called the ROBOT attack.
Read full story
Lance Cottrell's picture
Improved IoT Security Starts with Liability for Companies, Not Just Legislation
Lance Cottrell - Vulnerabilities
Laws to support swift and automatic updates for all devices, and consequence to organizations that fail to ensure their IoT devices are secure, would be a big step forward for IoT security.
Read full story
Jim Ivers's picture
Open Source Vulnerabilities: Are You Prepared to Run the Race?
Jim Ivers - Vulnerabilities
With a software composition analysis (SCA) tool in place, security teams can quickly scan an information repository and know where vulnerable software is being used.
Read full story