LATEST NEWS
MySQL 8.0.13: Change Current Password Policy
We have introduced a new policy for you to enforce on your non-privileged users. It requires their current password at the time they set a …
IoT related security missteps cost enterprises millions
Enterprises have begun sustaining significant monetary losses stemming from the lack of good practices as they move forward with …
Container strategies don’t take security seriously enough
Most organizations do not feel prepared to adequately secure cloud-native applications, despite the surging adoption of containers and …
Fake cryptocurrency Wallets Apps on Google Play Steal User Credentials and Mimic as Legitimate Wallets
Fake cryptocurrency wallet apps in Google play aimed at stealing user credentials or impersonate as cryptocurrency wallets. Security …
What’s keeping Europe’s top infosec pros awake at night?
As the world adapts to GDPR and puts more attention on personal privacy and security, Europe’s top information security professionals …
One in five Magecart-infected stores get reinfected within days
Online stores that have been infected with the Magecart malware –known to record and steal credit card details from checkout forms– often …
60% of firms believe a major security event will hit in the next few years
Only 30 percent of 1,250 senior executives, management and security practitioners in the U.S., U.K. and Canada are confident their business …
Employees aren’t taking the proper steps to keep information safe while traveling
Employees aren’t taking the proper steps to keep their organizations’ information safe while traveling. ObserveIT surveyed more than …
Access Control Acronyms: ACL, RBAC, ABAC, PBAC, RAdAC, and a Dash of CBAC
As the title of this posting probably tells you, there are a LOT of acronyms out there talking about Access Control. To level set, here are …
Majority of Cybercrime Damage is Caused by a Few, Powerful, Covert Criminal Threat Groups
A small subset of professional criminal actors is responsible for the bulk of cybercrime-related damage, employing tools and techniques as …
IoT Security Challenges and 5 Effective Ways to Handle Them
Over the years, the number of devices connected to the Internet has increased exponentially. From a little over 15 billion devices in 2015, …
Alex Jones blames industrial and political sabotage following hack of Infowars Store
The Infowars Store, the merchandise site of controversial conspiracy theorist Alex Jones has been hacked with the details of customers …
ICS cybersecurity startup Dragos raises $37M in new funding
Industrial control system cybersecurity startup Dragos Inc. has raised $37 million in new funding to continue its “mission of …
Vade Secure launches IsItPhishing Threat Detection to help SOCs identify phishing URLs
Vade Secure launched IsItPhishing Threat Detection, an anti-phishing solution that helps Security Operations Centers (SOCs) identify and …
My Health Record remains opt-out as Senate passes privacy amendments
The automatic creation of digital health records will continue as planned for all Australians who haven’t opted out by the new deadline of …
OpenStack Foundation board expands mission to host new open source projects
The board of directors of the OpenStack Foundation (OSF) adopted a resolution advancing a new governance framework supporting the …
Cequence Security announces application security platform to stop bot attacks
Cequence Security released Cequence ASP, an application security platform that provides a scalable defense against the growing number of …
Cisco shows steady earnings progress as all of its businesses grow
Cisco Systems Inc. comfortably beat fiscal first-quarter expectations today thanks to higher customer spending on applications and …
Cryptowerk introduces blockchain-based technology to certify data integrity of digital assets
Cryptowerk introduced Cryptowerk Seal, a blockchain-as-a-service (BaaS) solution that creates a seal for any form of digital assets. The …
CISA’s Palace: Congress backs new cybersecurity nerve-center for cyber-America’s cyber-future
The US House of Representatives has unanimously passed a bipartisan bill that would create a new agency to lead the federal government’s …
Citco launches new SaaS Æxeo Treasury solution on Amazon Web Services
The Citco Group of Companies (“Citco”) launched Æxeo Treasury, a Software-as-a-Service (SaaS) offering. The new product is a solution …
Cisco shows steady progress as all of its business segments grow
Cisco Systems Inc. comfortably beat expectations today as it reported its fiscal first quarter 2019 …
Another Meltdown, Spectre security scare: Data-leaking holes riddle Intel, AMD, Arm chips
Computer security researchers have uncovered yet another set of transient execution attacks on modern CPUs that allow a local attacker to …
Steganography – cool cybersecurity trick or dangerous risk? [VIDEO]
A security researcher recently figured out how to stash the complete works of Shakespeare in a single tweet, which sounds like a really …
Smashing Security #104: The world’s most evil phishing test, and cyborgs in the workplace
Does your employer want to turn you into a cyborg? Was this phishing test devised by an evil …
Dutch government report says Microsoft Office telemetry collection breaks GDPR
he telemetry data collection mechanism used by Microsoft Office breaks the EU General Data Protection Regulation (GDPR), Dutch authorities …
Tencent’s WeChat steps up censorship to clear undesirable content
WeChat, the popular messaging app operated by Chinese technology giant Tencent, has pledged to concentrate on cleaning up undesirable …
‘Mylobot’ botnet now downloading second-stage malware meant to siphon data
A global botnet has been set up to spread malware that is now able to siphon data, according to a report from CenturyLink Threat Research …
Microsoft begs customers: Just hold on to those pen-test reports until you’ve fully read them
Got a pen-test report detailing a crazy bad bug in Microsoft software? It could be your problem, not Microsoft’s. A day ahead of …
Levers of Human Deception: The Science and Methodology Behind Social Engineering
Anti-Malware , Anti-Phishing, DMARC , Business Email Compromise (BEC) Levers of Human Deception: The Science and Methodology Behind Social …
#InfosecNA18: Who Is Today’s CISO?
Whether it’s a question of to whom the CISO reports or quantifying what the CISO is actually responsible for, the role has changed over …
Adobe Published Security Updates for Flash Player, Adobe Acrobat and Photoshop
Adobe published security updates for multiple vulnerabilities in Flash Player, Adobe Acrobat, and Photoshop that allows attackers to steal …
Small-Time Cybercriminals Landing Steady Low Blows
Sophisticated cybercrime groups and nation-stated backed adversaries are not the only threats to enterprise security. A steady level of …
Another Meltdown, Spectre scare: Data-blabbing holes continue to haunt Intel, AMD, Arm
Computer security researchers have uncovered yet another set of transient execution attacks on modern CPUs that allow a local attacker to …
#InfosecNA18: Finding and Keeping Security Teams
Finding and keeping talent in the cybersecurity industry is a challenge for organizations of all sizes around the globe. As a result, the …
Security Teams Struggle with Container Security Strategy
A study out today shows that the security community is still coming to grips with the new realities introduced by containerization to aid …