The Department of Homeland Security recently published (PDF) its Strategic Principles for Securing the Internet of Things. It comprises six non-binding principles designed to provide security across the design, manufacturing and deployment of connected devices.
read more
What Makes a Good Exploit Kit
Exploit kits, pre-packaged software that uses vulnerabilities in software applications to spread malware, are not new to the information security community. Since 2006, when threat research organizations began seriously tracking their growth and distribution on a global basis, their popularity has increased within the underground steadily.
read more
iOS Lockscreen Bypass Gives Access to Contacts, Photos
Apple’s upcoming updates for iOS will likely include a fix for a new lockscreen bypass technique that can be used to access contact information and photos on locked iPhones and iPads.
read more
Several Vulnerabilities Patched in Drupal 7, 8
Drupal developers have released updates for versions 7 and 8 to address security flaws that can lead to information disclosure, cache poisoning, redirection to third-party sites and a denial-of-service (DoS) condition.
read more
Young Belgian Cyber-Patrollers Trained to Fight Online Hate
Belgium is training young people as cyber-patrollers in a government-backed campaign aimed at combating hate speech as Europe sees a surge in online abuse.
read more
Disgruntled Gamer ‘Likely’ Behind October US Hacking: Expert
The hacker who shut down large parts of the US internet last month was probably a disgruntled gamer, said an expert whose company closely monitored the attack Wednesday.
read more
Firefox 50 Patches 27 Vulnerabilities
Mozilla this week released Firefox 50 in the stable channel to patch 27 vulnerabilities and to provide users with improved Download Protection.
read more
CryptoLuck Ransomware Emerges
A new ransomware family spotted for the first time recently is already being distributed via an exploit kit (EK).
read more
Carbanak Hackers Hit Hospitality Firms With New Tactics
The prolific Carbanak crime group has recently zoned in on the hospitality sector and adopted a new attack methodology, Trustwave security researchers warn.
read more
Identity Management Firm Okta Launches Bug Bounty Program
Cloud identity and mobility management services provider Okta announced on Wednesday the launch of a public bug bounty program with rewards of up to $15,000 per vulnerability.
read more
