LATEST NEWS
A leaky database of SMS text messages exposed password resets and two-factor codes
A security lapse has exposed a massive database containing tens of millions of text messages, including password reset links, two-factor …
ThreatConnect expands TIP capabilities with new automation
TC Analyze product. Built for analysts, by analysts, TC Analyze provides a place to see teams’ tasks, analyze data, and connect all …
Super Micro chief bean counter: Bloomberg’s ‘unwarranted hardware hacking article’ has slowed our server sales
Super Micro Computer on Thursday reported net sales in the range of $952m to $962m for the first quarter of its fiscal 2019, which ended …
My Health Record extension highlights lingering security, privacy concerns
Health minister Greg Hunt may have cited website interruptions as the reason for extending the opt-out period for the government’s My …
Congress Passes Bill for New Federal Cybersecurity Agency
Cybersecurity Agency Cybersecurity and Infrastructure Security Agency Act now headed to President Trump for signing into law. A bill that …
Proofpoint: Hackers testing new reconnaissance malware on financial institutions
Hackers appear to be testing a new strain of malicious software in phishing emails sent to commercial banks and other targets, researchers …
Congress passes bill that create new Cybersecurity and Infrastructure Security Agency at DHS
The U.S. House of Representatives passed the CISA bill that creates a new cybersecurity agency at the Department of Homeland Security …
Up to three million kids’ GPS watches can be tracked by parents… and any miscreant: Flaws spill pick-and-choose catalog for perverts
Parents could be unwittingly putting their children’s safety and privacy at risk, thanks to security vulnerabilities in potentially …
The Open Source Conundrum
If you’ve read or watched the news at all in the last five years, you know that securing software is challenging. And in today’s world, …
IDG Contributor Network: Small Business Saturday means it’s time for an annual cyber refresh
As we approach Small Business Saturday, it’s a good time of year for small and mid-sized businesses to refresh their thinking around data …
Compromising vital infrastructure: air traffic control
While most of us know that flying is the safest mode of transport, we still feel that sigh of relief when the plane has made its landing on …
What’s Going on With libssh and What Should We Expect in the Near Future?
Recently, it was discovered that the well-known libssh library had a serious security vulnerability. This vulnerability, known as …
Facebook will pass off content policy appeals to a new independent oversight body
This is an incredibly important undertaking — and we’re still in the early stages of defining how this will work in practice. Starting …
Cloud, China, Generic Malware Top Security Concerns for 2019
There may still be nearly seven weeks left in 2018, but security leaders are already looking ahead to the new year. Enterprise concerns, …
AWS Security Profiles: Brittany Doncaster, Solutions Architect
In the weeks leading up to re:Invent, we’ll share conversations we’ve had with people at AWS who will be presenting at the event so you …
Cyber Crooks Diversify Business with Multi-Intent Malware
Diversification is a well-understood business principle. Nordstrom, for example, started as a shoe store — but then its founders figured …
John McAfee is ‘liable’ for 2012 death of Belize neighbour, rules court
Infosec personality John McAfee has been found legally “liable” via a default judgment for the death of his neighbour, who was found dead …
Combating Potentially Harmful Applications with Machine Learning at Google: Datasets and Models
In a previous blog post, we talked about using machine learning to combat Potentially Harmful Applications (PHAs). This blog post covers …
#InfosecNA18: Threat Sharing Makes Good Neighbors
Despite the session’s name, “Two Points of View: Collaboration and …
Facebook Patches Bug that Exposed Private Information
The issue is that the endpoint that expects a GET request with a number of search parameters is now cross-site request forgery (CSRF) …
Facebook reports a massive spike in government demands for data, including secret orders
Facebook has published the details of 13 historical national security letters it’s received for user data. The embattled social media …
Thought you deleted your iPhone photos? Hackers find a way to get them back
Twice a year, an international contest called Pwn2Own – the Olympic Games of competitive hacking, if you like – gives the world’s top …
‘I’m Possibly Alive Because It Exists:’ Why Sleep Apnea Patients Rely on a CPAP Machine Hacker
The Weakest Link is Motherboard’s third, annual theme week dedicated to the future of hacking and cybersecurity. Follow …
Electricks eCommerce 1.0 Cross Site Scripting
Electricks eCommerce version 1.0 suffers from a persistent cross site scripting …
DOD disables file sharing service due to ‘security risks’
The US Department of Defense has disabled access last week to a file sharing service used by its army aviation and missile research centers …
WordPress Ninja Forms 3.3.17 Cross Site Scripting
WordPress Ninja Forms version 3.3.17 suffers from a cross site scripting …
Why aren’t chip credit cards stopping “card present” fraud in the US?
A security analysis firm called Gemini Advisory recently posted a report saying that credit card fraud is actually on the rise in the US. …
The perils of using voice commands with IoT machines
Earlier this week, German carmaker Volkswagen announced an upgrade to its VW Car-Net mobile app that lets iPhone users control their Golfs …
Japan Cyber Minister Says He Has Never Used a Computer
The debate over whether computer or security expertise should dominate a CISO’s credentials is long, but rarely has someone tilted the …
Facebook’s weapon amid chaos and controversy: misdirection
The New York Times’ bombshell report into the past three years at Facebook paint a grotesque picture of the company’s attempts to …
Facebook under pressure over Soros smear tactics
Facebook is facing calls to conduct an external investigation into its own lobbying and PR activities by an aide to billionaire George …
Phishing emails with .com payloads target finance departments
There has been an increase in the use of .com extensions in phishing emails that target financial service departments, according to a new …
AWS Security Profiles: Brigid Johnson, Senior Manager of Product Management
In the weeks leading up to re:Invent, we’ll share conversations we’ve had with people at AWS who will be presenting at the event so you …
From Reactive to Proactive: Security as the Bedrock of the SDLC
Secure code development should be a priority, not an afterthought. The benefits are significant and well worth the additional time and …
Trend Micro and Moxa Team Up to Create “TXOne Networks” – IT/OT Security Convergence Gaining Pace
Japanese cybersecurity multinational Trend Micro has agreed to form a joint venture business with California-based industrial …
20% of MageCart-compromised merchants get reinfected within days
MageCart, the notorious malware that has been haunting online stores by stealing payment card details from online shoppers at checkout, is …