Tens of thousands of devices running Cisco’s Adaptive Security Appliance (ASA) software are still vulnerable to attacks leveraging an exploit leaked by a group calling itself Shadow Brokers.
read more
Umbreon Rootkit Being Distributed via Manual Installs
A recently analyzed Linux rootkit is being distributed via manual installations and targeting both Intel and ARM platforms, embedded platforms included, and provides attackers with complete control over the compromised devices, Trend Micro researchers warn.
read more
The Importance of Security Based on Outcomes
I don’t know about you, but I’m rapidly closing in on twenty years in this industry. I’m blessed enough to have held a variety of jobs in the general security field, and worked through a long string of challenging roles that gave me perspective. Over that span of time, I’ve always tried to apply security like anything else – starting with the end in mind.
read more
Increasing Number of Devices Exposed by Crypto Key Reuse
Nine months after researchers revealed that millions of devices are exposed to cyberattacks due to the reuse of cryptographic keys in their firmware, the number of impacted systems has increased considerably.
read more
HSBC Allows Selfies for User Authentication
HSBC bank has become the latest financial institution to adopt smartphone-based biometrics as a form of user authentication. Institutions already doing so include MasterCard (selfie), Barclays (voice) and Bank of Montreal (selfie or fingerprint). HSBC's chosen method is the selfie.
read more
Google Signs Up For EU/U.S. Privacy Shield
Google has signed up for the EU/U.S. Privacy Shield, which provides a set of enforceable protections for the personal data of EU individuals.
read more
Sophos Products Detect Legitimate Windows File as Malware
Sophos rushed to release an update over the weekend after system administrators started complaining that the security firm’s products had flagged a legitimate Windows file as malicious.
read more
100 Million Accounts Stolen From Russian Web Portal Rambler
Hackers stole the details of nearly 100 million users from the Russian web portal Rambler in an attack that took place several years ago.
read more
Clinton: ‘Grave’ Concern Russia Interfering in U.S. Elections
White House hopeful Hillary Clinton expressed "grave" concern Monday about reports that Russia has been interfering in the US electoral process through invasive cyber attacks on the Democratic Party.
read more
Sundown Exploit Kit Outsources Coding Work
Sundown, a relatively new exploit kit (EK), is outsourcing panel and Domain Generation Algorithm (DGA) coding work and stealing exploits in an attempt to improve its presence on the EK scene.
read more
