LATEST NEWS
Emotet on the rise with heavy spam campaign
The threat landscape is changing once again, now that the ocean of cryptocurrency miners has shrunk to a small lake. Over the last couple …
Masergy launches Secure Hybrid Networking for enterprises
Masergy introduces Secure Hybrid Networking, an evolution of the company’s network and security solutions. Masergy Secure Hybrid …
Twitter: Don’t panic, but we may have leaked your DMs to rando devs
Twitter is in full damage control mode after disclosing that it may have inappropriately exposed some unlucky twits’ private tweets and …
Expert disclosed an unpatched zero-day flaw in all supported versions of Microsoft Windows
A security researcher from Trend Micro Security Research team disclosed an unpatched zero-day vulnerability in all supported versions of …
Agari Fall ‘18 release completes automated email security solution powered by AI
Agari announced its Fall ‘18 release, a series of enhancements for the Agari Email Trust Platform — the industry’s automated email …
The ‘Opsec Fail’ That Helped Unmask a North Korean State Hacker
Park Jin Hyok and his colleagues at North Korea’s infamous, state-sponsored Lazarus Group hacking team moonlighted on the side as …
Couldn’t give a fsck about patching? Well, that’s your WordPress website pwned, then
Website admins are urged to update their WordPress installations as soon as possible to the latest version following a rash of attacks …
Business Email Compromises Fuel Procurement Fraud
Business email compromises have been at the center of a number of procurement fraud scams, says Allan Stojanovic, a security architect and …
Riskonnect announces new User Experience interface
Riskonnect announced the release of its new Riskonnect User Experience, RKUX. The enhancement delivers a user experience designed to help …
Romanian Hacker Pleads Guilty for Role in Inauguration Surveillance Ransomware
Attack against the Metropolitan Police Department was disrupted before malware could be sent to additional …
Twitter notifies users about API bug that shared DMs with wrong devs
Twitter has started notifying developers today about an API bug that accidentally shared direct messages (private messages) or protected …
Twitter notifies developers about API bug that shared DMs with wrong devs
Twitter has started notifying developers today about an API bug that accidentally shared direct messages (private messages) or protected …
Twitter says bug may have exposed some direct messages to third-party developers
Twitter said that a “bug” sent user’s private direct messages to third-party developers “who were not authorized to receive …
Twitter bug exposed direct messages to third-party developers
Twitter says bug may have exposed some direct messages to third-party developers Zack Whittaker @zackwhittaker / 40 mins ago Twitter said …
CVE-2018-17001 – On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been di …
On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the …
Twitter bug sent user direct messages to developers for over a year
Twitter said that a “bug” sent user’s private direct messages to Twitter developers “who were not authorized to receive them.” …
Jolicode.com: How to Mix Security and Form with Symfony
On the Jolicode.com blog, there’s a tutorial they’ve posted showing how to “mix security and forms” in a Symfony application to show only …
Researcher Discloses New Zero-Day Affecting All Versions of Windows
A security researcher has publicly disclosed an unpatched zero-day vulnerability in all supported versions of Microsoft Windows operating …
Independence Blue Cross Breach Exposed 17K Records
Independence Blue Cross, a Philadelphia-based health insurer notified thousands of its members this week that a data breach had exposed …
6 Security Training Hacks to Increase Cyber IQ Org-Wide
Move beyond generic, annual security awareness training with these important …
Cyber-Attack Inevitable, Businesses Not Prepared
As the cyber industry continues to evolve, it becomes increasingly difficult for organizations to stay ahead of the curve, making the …
White House Issues National Cyber Strategy
Taking a critical step forward in national cyber defense, the White House yesterday published the National Cyber Strategy, aimed at …
Access Management for Kubernetes (Part 1)
What Is Fine-Grained Access Management? The need for implementing an access management solution mandates us to identify the resources that …
New Virobot ransomware will also log keystrokes, add PC to a spam botnet
A newly discovered ransomware strain is a multi-tasking threat that besides encrypting users’ files, it can also log and steal their …
Credit Freezes are Free: Let the Ice Age Begin
It is now free in every U.S. state to freeze and unfreeze your credit file and that of your dependents, a process that blocks identity …
DigiCert, Gemalto, ISARA Partner for Quantum-Safe Encryption
As Quantum Computing power grows, so too does the risk to currently deployed cryptographic algorithms, which is why DigiCert, Gemalto and …
Understanding California’s Consumer Privacy Act: The ‘American GDPR’
As enterprises around the world deal with legislative backlash following years of unfettered data collection, companies are confused about …
US Approves Cyber Weapons Against Foreign Enemies
The White House is changing the rules on its use of digital weapons to fight adversaries targeting US …
Simple Authentication and Security Layer (SASL) vulnerabilities
Simple Authentication and Security Layer (SASL) is an authentication layer used in Internet protocols. SASL is not a protocol, but rather a …
Using Machine Data Analysis to Detect Fraud
Connecting the dots between disparate forms of machine data can prove to be valuable in discovering fraud patterns, says Jade Catalano of …
Enigma message crack honours pioneering Polish codebreakers
The Bombe team at The National Museum Of Computing has succeeded in breaking an Enigma-encrypted message in a live Poland-to-England demo. …
Windows May Be Storing All Your Email and Docs as Unencrypted Plaintext
Forensic analyst and data recovery expert Barnaby Skeggs has discovered a troubling design decision in Windows 8.1 and Windows 10 that …
Data Manipulation: How Security Pros Can Respond to an Emerging Threat
Industry leaders are scrambling to address the issue, which will take new thinking to …
Protecting vital NHS systems from cyberattack – Live event
In his first speech as health and social care secretary, Matt Hancock made clear the importance of technology to the NHS. He has pledged …
Executive Branch Makes Significant Progress As DMARC Deadline Nears
The DHS directive on email security has an approaching deadline that most departments in the executive branch might actually …