An Iran-linked advanced persistent threat (APT) group dubbed OilRig has used a fake Juniper Networks VPN portal and fake University of Oxford websites to deliver malware to victims.
read more
Fake Super Mario Run for Android Installs Malware
The Android Marcher Trojan was recently observed masquerading as the recently released Super Mario Run mobile game for Apple’s iOS, Zscaler security researchers warn.
read more
Massachusetts Opens Data Breach Notification Archive to Public
The Commonwealth of Massachusetts this week made an important step toward improving data breach transparency, as the Office of Consumer Affairs and Business Regulation (OCABR) made its Data Breach Notification Archive publicly available online.
read more
FTC Sues D-Link Over Failure to Secure Cameras, Routers
The U.S. Federal Trade Commission (FTC) has filed a lawsuit against Taiwan-based networking equipment provider D-Link, accusing the company of making deceptive claims about the security of its products, particularly IP cameras and routers.
read more
Claims of Plone Zero-Day and FBI Hack Likely False
Claims that the FBI’s website has been hacked using a zero-day vulnerability in Plone are false, according to the developers of the open source content management system (CMS).
read more
KillDisk Malware Targets Linux Machines
The destructive KillDisk malware previously associated with attacks targeting industrial firms, was recently observed infecting Linux machines as well, ESET security researchers warn.
read more
“MM Core” APT Malware Now Targets United States
New versions of an advanced persistent threat (APT) malware first discovered several years ago have been found to target organizations in the Middle East, Central Asia, Africa and the United States.
read more
Make a New Year’s Resolution to Get Serious About Software Security
The beginning of any new year is a time for examination and setting new goals and objectives. Many of you understand that addressing the vulnerabilities in your software is something you can no longer ignore, and are ready to get serious about software security. Resolutions are nice, but if you are serious there are some basic steps on how to turn your resolution into reality.
read more
Netgear Launches Bug Bounty Program
Networking equipment provider Netgear announced on Thursday the launch of a bug bounty program focusing on the company’s products, particularly routers, security cameras and mesh Wi-Fi systems.
read more
FireCrypt Ransomware Packs DDoS Code
Ransomware has become a menace for both consumers and enterprises, and malware authors appear determined to take the threat to the next level by adding new capabilities, such as distributed denial of service (DDoS) functionality.
read more
