LATEST NEWS
60 percent of organizations have suffered disruptive cyber events in the last two years
A new study reveals that 60 percent of organizations globally have suffered two or more business-disrupting cyber events — defined as …
Congratulations: You Get ‘Free’ Identity Theft Monitoring
Equifax’s 2017 data breach notification to 148 million Americans Oh, that glorious moment of anticipation, when you receive a missive that …
Higher Education: 15 Books to Help Cybersecurity Pros Be Better
Constant learning is a requirement for cybersecurity professionals. Here are 15 books recommended by professionals to continue a …
RSA Conference announces initial 2019 keynote speakers
RSA Conference announced its initial line-up of keynote speakers for the 2019 Conference, which begins Monday, March 4 and runs through …
Holiday ID Fraud Report Shows 2018 Fraud Reaches 5 Year High
New data from Jumio reveals that online ID fraud attempts on government-issued IDs increased 22 percent worldwide during the 2018 Black …
Captchas are dead…ish.
The dark side of Machine Learning A research team has now succeeded in using machine learning to automatically solve some of the common …
Samsung fixes flaws that could have let attackers hijack your account
A recently patched trio of flaws in Samsung’s mobile site was leaving users vulnerable to attackers who could have reset their user …
December 2018 Patch Tuesday: Microsoft patches Windows zero-day exploited in the wild
It’s Patch Tuesday again and, as per usual, both Microsoft and Adobe have pushed out patches for widely-used software packages. The …
Google+ to power down early after second security hole found
Google has disclosed the second security hole in its Google+ social network in three months. This one exposed private information from 100 …
Dixons Carphone smarting from £440m loss as it writes down goodwill on mobile biz
Dixons Carphone today reported a £440m statutory loss at the halfway stage of its fiscal ’19 after writing down the goodwill of its mobile …
Continuous Compliance Eases Cloud Adoption for Financial Services Firms
Last month, I spoke during the Innovation Showcase at the Financial Services Information Sharing and Analysis Center (FS-ISAC) Fall Summit. …
Text CAPTCHAs easily beaten by neural networks
As CAPTCHA-haters know to their frequent irritation, rumours of the imminent death of the text-based Completely Automated Procedures for …
Think Your Network Is Safe? If You Don’t Have Visibility Into Hardware Vulnerabilities, Think Again
Co-authored by Malgorzata Jablonska. If you follow basic security best practices and quickly patch software issues as they arise, you may …
Global hacking campaign takes aim at finance, defence and energy companies
A global hacking operation is targeting government departments, defence, telecoms and other high tech organisations around the world in …
Phones are selling location data from “trusted” apps
A New York Times investigation has found that apps such as GasBuddy and The Weather Channel are among at least 75 companies getting …
Is Windows 10 still telling Microsoft what you’re doing even if you don’t want it to?
Is Windows 10 still telling Microsoft what you’re doing even if you don’t want it to? Microsoft baffles Windows 10 users by apparently …
Phishing improves in quality as major brands are targeted
It used to be easy to spot a phishing email, you just looked out for bad grammar and URLs that clearly didn’t correspond to the …
DXC Technology turns to BT Security to nab its infosec bossman
DXC Technology UK arm has hired former BT Security CEO Mark Hughes to run its global security function, replacing yet another old timer …
Former Mt. Gox CEO could face 10 years behind bars in embezzlement case
Prosecutors are pursuing a sentence of ten years in prison for the former chief executive of Mt. Gox, Mark Karpeles, over alleged …
‘Operation Sharpshooter’ Targets Global Defense, Critical Infrastructure
This post was written with contributions from the McAfee Advanced Threat Research team. The McAfee Advanced Threat Research team and …
Adobe’s Year-End Update Patches 87 Flaws in Acrobat Software
Adobe today released patches for 87 vulnerabilities affecting its Acrobat and Reader software products for both macOS and Windows operating …
AI Set to Supercharge Phishing in 2019
The coming year will see a mix of old and new as phishing is supercharged with AI but reported vulnerabilities continue to cause …
Ticketmaster tells customer it’s not at fault for site’s Magecart malware pwnage
Ticketmaster is telling its customers that it wasn’t to blame for the infection of its site by a strain of the Magecart cred-stealing …
400 Million Users Affected With Critical Microsoft Account Takeover Vulnerability
Multiple critical vulnerabilities that chained together allows an attacker to take control over Microsoft Outlook, Microsoft Store, or …
New Trojan Targets PayPal App
Security researchers at Slovakia’s ESET have identified a new banking Trojan that bypasses PayPal’s two-factor authentication (2FA) to …
Microsoft and Adobe Patch 100+ Bugs in December
There’ll be plenty for system administrators to do right up to the end of the year with Microsoft’s latest patch update round featuring …
Marriott: Breach Victims Won’t Be Forced Into Arbitration
Marriott: Breach Victims Won’t Be Forced Into Arbitration Victims Objected to Terms Of Fraud Monitoring Agreement Jeremy Kirk (jeremy_kirk) …
Microsoft Issues Patch for Windows Zero-Day Flaw Under Active Attack
Microsoft today, on its year-end December Patch Tuesday, released security updates to patch a total 39 vulnerabilities its Windows …
The finger has been pointed at China for Marriott data breach
A Chinese cyberespionage campaign was behind a devastating data breach affecting millions of Marriott guests, reports suggest. More …
CyberLink LabelPrint 2.5 Stack Buffer Overflow
Topic: CyberLink LabelPrint 2.5 Stack Buffer Overflow …
Securing and managing the enterprise Internet of Things
A future where the Internet of Things spreads exponentially is almost certain. Seemingly everybody wants these …
API Security Weekly: Issue #9
There was a huge privilege escalation vulnerability that got fixed this week. The flaw allows attackers to contact Kubernetes API server …
6.8% of the top 100,000 websites still accept old, insecure SSL versions
Mac-based malware has appeared on the list of the top ten most common types of malware for the first time in WatchGuard’s quarterly …
Starwood breach affecting 500m users reportedly part of a larger Chinese state-sponsored attack
Remember that massive breach of the Mariott-owned Starwood hotel chain from last month, which saw 500 million users’ data stolen? The New …
Will sophisticated attacks dominate in 2019?
As we head into 2019, organizations must understand the security implications of greater cloud adoption, converging IT and OT, and …
November 2018: Most wanted malware exposed
Check Point has published its latest Global Threat Index for November 2018. The index reveals that the Emotet botnet has entered the …