Researchers have identified another IBM Java patch that can be easily bypassed and claim the vendor failed to properly analyze the vulnerability they reported back in 2013.
read more
Symantec Speaks on Latest Threat Trends
Released today, Symantec's Internet Security Threat Report 2016 (ISTR) is a data-based analysis of cybersecurity events and issues over the last year. Symantec has been producing these reports for more than 10 years, drawing data from more than 63.8 million attack sensors in more than 150 countries and territories.
read more
Microsoft, Samba Patch “Badlock” Vulnerability
Updates released by Microsoft and Samba on Tuesday patch the vulnerability dubbed “Badlock,” although it turns out that the issue is not as severe as expected.
read more
Two-Factor Authentication Bypassed in Simple Attacks
Mobile phone-based two-factor authentication (2FA) mechanisms are plagued by synchronization vulnerabilities that allow attackers intercept One-Time Passwords (OTPs) and bypass the security of many financial services, researchers say.
read more
Improved Qbot Worm Targets Public Institutions
Researchers at BAE Systems have observed an improved version of the Qbot malware being used in attacks aimed at public institutions in the United States and other countries.
read more
Citadel-Derivative Atmos Targeting French Banks
Atmos, a derivative of the ZeuS/Citadel stable, has been detected targeting banks in France. The malware has been active since late 2015, but this seems to be its first concerted use.
read more
Philippines Probes Hacking of Poll Agency Ahead of Election
Manila – Philippine authorities are investigating a computer security breach at the state election agency, officials said Tuesday, less than a month before the nation goes to the polls.
read more
Links Found Between Different Ransomware Families
Researchers have identified possible links between Rokku and Chimera, and between PowerWare and PoshCoder ransomware.
PowerWare and PoshCoder
read more
Locky Ransomware Gets New Infection Vector, Improved Evasion
The developers behind the Locky ransomware are tireless in their quest to evade security controls and gain a higher infection rate, and they have recently implemented a variety of changes to the ransomware’s code to support their mission.
read more
Why Ransomware is Winning – and How to Turn the Tide
Every week we hear of several new high profile ransomware incidents affecting hospitals, schools, businesses and government. It’s gotten so bad that cybersecurity agencies in the U.S. and Canada recently issued an alert about the growing number of ransomware attacks affecting health care organizations.
read more
