Pwn2Own 2016 has come to an end, with researchers earning a total of $460,000 in cash for disclosing 21 new vulnerabilities in Windows, OS X, Flash, Safari, Edge and Chrome.
read more
Reliable Exploit Developed for Android Stagefright Flaw
Experts at software research firm NorthBit have developed what they believe to be a reliable exploit for a Stagefright vulnerability affecting Google’s Android operating system.
read more
Nigerian Cybercriminals Target Firms Worldwide in BEC Campaign
Researchers at Trend Micro have been monitoring a business email compromise (BEC) campaign aimed at companies from all around the world.
read more
What Does a Typical Fortune 100 CISO Look Like?
What does a CISO look like? You may think that's a tough question–and it is. But the folks at cybersecurity firm Digital Guardian have done some research and profiled the typical CISO at a Fortune 100 enterprise.
read more
SAST and DAST: Part of a Balanced Software Security Initiative
“…is part of this balanced breakfast…”
This is the claim of many sugary cereals aimed directly at children. It is also the claim of many vendors in the software security market.
read more
Experts Earn $280,000 for Hacking Safari, Flash, Chrome
Pwn2Own 2016 contestants hacked Apple Safari, Adobe Flash Player and Google Chrome, and earned more than $280,000 on the first day of the competition taking place this week alongside the CanSecWest conference in Vancouver, Canada.
read more
American Express Warns Cardholders of Data Breach
American Express informed customers last week that their payment card information may have been compromised after a third party service provider suffered a data breach.
read more
Malvertising Campaign Hits Top Global Websites
A recent malvertising campaign leveraging the Angler exploit kit (EK) has hit many top websites, including news sites, entertainment portals, and political commentary sites.
read more
iOS Malware “AceDeceiver” Exploits Flaw in Apple DRM
Researchers have discovered a new iOS malware family that abuses design flaws in Apple’s FairPlay digital rights management (DRM) technology to infect devices, even ones that haven’t been jailbroken.
read more
Breach at DDoS Protection Firm Staminus Exposes 2,300 Clients
Last week, distributed denial of service (DDoS) protection company Staminus was breached in an attack that appears to have impacted roughly 2,300 current and past customers.
read more
