LATEST NEWS
Critical Code Execution Vulnerability Found in Libraries Used By VLC and Other Media Players
A critical code execution vulnerability identified in LIVE555 Streaming Media RTSP Server library used by VLC and other media players. The …
How Visibility Unlocks DevSecOps Potential
Reports suggest that two-thirds of enterprise workloads currently run in the cloud, and as businesses look to unlock the advantages it …
Java Usage Tracker Critical Flaw Enable Hackers to Inject Arbitrary Files on Windows Systems
Newly discovered critical vulnerabilities in Java Usage Tracker allows the attacker to run arbitrary files in a vulnerable windows machine …
Russian Trolls Are Still Playing Both Sides—Even With the Mueller Probe
the Justice Department announced that Russia and the world’s most interesting catering company continue to attack the United States …
Facebook Portal isn’t designed to be as private as you might hope
I doubt I’m alone in the world in thinking that allowing Facebook, of all companies, into your home with a microphone and a video camera …
Spotted: Miscreants use pilfered NSA hacking tools to pwn boxes in nuke, aerospace worlds
Miscreants are using a trio of NSA hacking tools, leaked last year by the Shadow Brokers, to infect and spy on computer systems used in …
Audio recording is now disabled by default in OpenBSD
In a move made to improve security, the team behind the OpenBSD operating system have disabled microphone-based audio recording functions …
EU Takes Step Toward Cyberattack Sanctions
European Union leaders have approved an initiative that would expand sanctions on nations proven to have conducted cyberattacks. A group of …
WSJ Report: Facebook Breach the Work of Spammers, Not Nation-State Actors
The recent Facebook breach that hit 30 million accounts was caused by spammers — not by a nation-state attack group — according to a …
Smart home makers hoard your data, but won’t say if the police come for it
A decade ago, it was almost inconceivable that nearly every household item could be hooked up to the internet. These days, it’s near …
DisruptOps Aims to Improve Cloud Security With Guardrails
In the world of security, a common tactic is to block malicious actions in an attempt to prevent harm, but that’s not the approach that …
Fixing a CSRF Vulnerability
One way that your website might be vulnerable to an attack is via a Cross-Site Request Forgery (CSRF or XSRF). If you’ve ever been logged …
Facebook launches ‘Hunt for False News’ debunk blog as fakery drops 50%
Facebook launches “Hunt For False News” debunk blog as fakery drops 50% Josh Constine @JoshConstine / 36 mins ago Facebook hopes …
Fin Firms: Look to Mobile, Social for Comms Risks
A survey of nearly 200 financial services compliance individuals conducted throughout February and March 2018 found that organizations are …
This Week in Security News: Apex One™ Release and Java Usage Tracker Flaws
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few …
Yale Faces Additional Lawsuit After 2011 Breach
Despite its reputation as having the top law school in the country, Yale University is facing a second lawsuit after the personal …
Yale Security Fail: ‘Unexpected load’ caused systems to crash, whacked our Smart Living Home app
An unspecified and “unexpected load” on its infrastructure broke the Smart Living Home app for a day, an apologetic Yale Security UK …
Facebook launches “Hunt For False News” debunk blog as fakery drops 50%
Facebook hopes detailing concrete examples of fake news it’s caught — or missed — could improve news literacy or at least prove …
Flaw in Libssh Grants Admin Control to Servers
Security researcher Peter Winter-Smith discovered a four-year-old authentication bypass vulnerability in the server code of libssh versions …
Android Protected Confirmation: Taking transaction security to the next level
In Android Pie, we introduced Android Protected Confirmation, the first major mobile OS API that leverages a hardware protected user …
Buggy software in popular connected storage drives can let hackers read private data
Security researchers have found flaws in four popular connected storage drives that they say could let hackers access a user’s private …
A Trove of Facebook Data Is a Spammer’s Dream and Your Nightmare
at the end of September that it had suffered a data breach that ultimately affected 30 million accounts, it seemed, perhaps, like the work …
Celebrating 100 episodes of the Smashing Security podcast
To celebrate 100 episodes of the “Smashing Security” podcast I co-host with Carole Theriault each week, we asked listeners to let us …
Manager who worked on Equifax’s breach website sentenced for insider trading
In August 2017, Sudhakar Reddy Bonthu, a production development manager in Equifax’s software management team was given a project …
Risky Business: Dark Reading Caption Contest Winners
Dark Reading reader Bruce Walton, senior manager, information risk management, at Optum (aka waltonob) took the top honors and a $25 Amazon …
Kaspersky says it detected infections with DarkPulsar, alleged NSA malware
aspersky Lab said today that it detected computers infected with DarkPulsar, a malware implant that has been allegedly developed by the US …
Cybersecurity in Trading and Forex: What You Need to Know
While cyber attacks occur almost daily in the world, sometimes with catastrophic results, we do not hear about successful attempts of …
Password and credit card-stealing Azorult malware adds new tricks
A form of password, credit card details and cryptocurrency-stealing malware has been updated, making it even more potent for cyber …
Google warns Apple: Missing bugs in your security bulletins are ‘disincentive to patch’
Apple has secretly patched a bunch of high-severity bugs reported to it by Google’s Project Zero researchers. More security news Edge …
Critical Flaw Found in Streaming Library Used by VLC and Other Media Players
Security researchers have discovered a serious code execution vulnerability in the LIVE555 Streaming Media library—which is being used by …
The life of an ethical hacker [Q&A]
We often hear the term ‘ethical hacker’, but what exactly does this involve and is it something you can actually make a career out of? We …
Facebook hires former UK Lib Dem leader, Nick Clegg, as global policy chief
Facebook has confirmed it has hired the former leader of the UK’s third largest political party — Nick Clegg of the political middle …
Financial industry unites to enhance data security, innovation and consumer control
Financial institutions, fintech firms and industry groups launched the Financial Data Exchange (FDX), a non-profit organization to unify …
TeleSign to deliver identity verification and fraud prevention with enhanced Mobile Identity Solutions
TeleSign enhanced coverage of mobile identity services in China, Brazil, and other emerging markets. International businesses can now …
“We know you watch porn” (and here’s fake proof…) [PODCAST]
Here’s Episode 6 of the Naked Security podcast. This week, Naked Security editor-in-chief Anna Brading talks to Sophos experts Paul …
Presidential race in Brazil marred by WhatsApp scandal
Companies supporting Brazilian presidential candidate Jair Bolsonaro have been accused of backing a campaign to fire thousands of WhatsApp …