LATEST NEWS
After SamSam, Ryuk shows targeted ransomware is still evolving
Thanks to Hajnalka Kope of SophosLabs for the research behind this article. Last month the world learned that the FBI thinks it has …
German cybersecurity chief: Anyone have evidence of Huawei naughtiness?
Germany’s top cybersecurity official has said he hasn’t seen any evidence for the espionage allegations against Huawei. Arne Schönbohm, …
Paranoia will destroy us: Why Huawei and other Chinese tech is not spying on Americans
It all began about a year ago. At CES 2018 in Las Vegas, the US President of Huawei’s consumer business, Richard Yu, went off-script in his …
Target targeted: Five years on from a breach that shook the cybersecurity industry
In the twenty years since the start of my career in InfoSec, there have been a handful of security incidents that really stick out in my …
American Sues US Government For Allegedly Pressuring Him To Unlock His Phone at Airport
A California man sued the US government after Customs and Border Protection and Department of Homeland Security agents allegedly detained …
KnowBe4 Launches PhishER To Improve Email Security
Security firm KnowBe4 announced its new PhishER offering on Dec. 18, providing organizations with a new way to help analyze and manage …
All the reasons why cybercriminals want to hack your phone
When people think of hacking, most imagine desktop computers, laptops, or perhaps even security cameras. However, in recent years, …
Practical DNS
This Refcard is intended as a practical introduction to DNS, and assumes you are familiar only with networking basics. After a brief …
How to Engage Your Cyber Enemies
Having the right mix of tools, automation, and intelligence is key to staying ahead of new threats and protecting your organization. …
HolaVPN Network: Unencrypted and Abused?
Japan’s Trend Micro today warned customers to ditch the widely used HolaVPN software, as traffic to its “super nodes” is unencrypted …
HolaVPN Network: Unencrypted and Abused
Japan’s Trend Micro today warned customers to ditch the widely used HolaVPN software, as traffic to its “super nodes” is unencrypted …
Fake Tech Support Centers Raided in India: Scams Uncovered
Scammers at fake tech support centers — frequently based in India — capitalize on those unsettled feelings, often coercing people to …
Auditing Open Ports in AWS EC2 Security Groups Using AWS Console [Comic]
If there are hundreds of instances running on your AWS cloud, auditing for open ports ‘0.0.0.0/0 allow` rule on AWS EC2 Security Groups …
Twitter warned of phone country code leak two years ago — but did nothing, security researcher says
A security researcher found a bug in Twitter’s support form two years ago that exposed the country codes of phone numbers attached to …
8 Security Tips to Gift Your Loved Ones For the Holidays
OK, so you’re sitting around the fireplace, eggnog in hand, the family’s about to open presents, and your brother-in-law wants to know …
SIG-Auth Bolstering Security Authorization in Kubernetes
Kubernetes security authentication moving forward with SIG-Auth, and Elastifile providing scalable file storage for Google Cloud. One of …
Twitter warned of phone country code leak two years ago – but did nothing, security researcher says
Twitter warned of phone country code leak two years ago — but did nothing, security researcher says Zack Whittaker @zackwhittaker / 13 …
Researchers slam Hola VPN over absent encryption, user IP leaks
Researchers have warned that a free VPN service downloaded millions of times is failing to mask the digital footprints of users. More …
Machine Learning Will Transform How We Detect Software Vulnerabilities
No one doubts that artificial intelligence (AI) and machine learning will transform cybersecurity. We just don’t know how or …
Twitter Sees Signs of State-Sponsored Attack
Twitter says that an unspecified number of its users may have been targeted by state-sponsored hackers, seeking to unmask their identity. …
Czech cybersecurity agency warns Huawei and ZTE products pose security threat
The Czech Republic’s national cybersecurity agency has urged against using software and hardware from Huawei and ZTE because they present a …
The Iran Hacks Cybersecurity Experts Feared May Be Here
Donald Trump announced that the United States would withdraw from the 2015 nuclear agreement, negotiated by the Obama Administration, …
From Naughty to NICE: Best Practices for K–12 Cybersecurity Education
In an effort to raise cybersecurity awareness and help both school districts and teachers develop security-based curricula, the National …
Cybersecurity Trends 2019: Privacy and intrusion in the global village
So, it’s almost a wrap for 2018. Before we rush to welcome the New Year, however, let’s consider what may await the cybersecurity …
Facebook photo API bug exposed users’ unpublished photos
A bug in Facebook’s photo API may have exposed up to 6.8 million users’ photos to app developers, the company announced on Friday. …
Twitter uncovered a possible nation-state attack
Twitter discovered a possible nation-state attack while it was investigating an information disclosure flaw affecting its platform. …
Logitech flaw fixed after Project Zero disclosure
When it comes to fixing security vulnerabilities, it should be clear by now that words only count when they’re swiftly followed by …
Twitter fixes bug that lets unauthorized apps get access to DMs
Back in 2013, the OAuth keys and secrets that official Twitter apps use to access users’ Twitter accounts were disclosed in a post to …
FBI Indicts SamSam Ransomware Suspects
The U.S. and Canada recently fell victim to a severe cybercrime scheme that affected the operations of several critical networks in both …
Sneaky phishing campaign beats two-factor authentication
Protecting an account with multi-factor authentication (MFA) is a no-brainer, but that doesn’t mean every method for doing this is …
Met Slammed for Using Dodgy Facial Recognition Cameras
The Metropolitan Police force has come in for more heavy criticism over its use of wildly inaccurate facial recognition cameras in central …
These Silent Fixes Are Silent Killers in Open-Source Security
When it comes to open-source software, it’s natural for development and security leaders to want to know that the code they’re using is …
New Malware Takes Commands From Memes Posted On Twitter
Security researchers have discovered yet another example of how cybercriminals disguise their malware activities as regular traffic by …
Today’s Guest Editor: Sophia McCall
This Christmas, Infosecurity has invited some top industry names to each fill the role of guest editor for a day, and we are delighted to …
Russian Social Media Interference Continues, Reports Warn
The battle against Russian disinformation is far from over. Two in-depth reports released on Monday have revealed a disturbing …
Czech cyber-security agency warns over Huawei, ZTE security threat
A Czech cyber-security agency is warning against using Huawei and ZTE technologies because they pose a threat to state security. The …