Google’s latest set of Nexus patches are rolling out now to resolve multiple Critical vulnerabilities in Android, including a series of remote code execution (RCE) flaws in the mediaserver component.
read more
50 million PII Records of Turkish Citizens Posted Online
Hackers have dumped a database apparently containing personal details of almost 50 million Turkish citizens. The details were posted to an Icelandic organization that specializes in such data dumps. According to SecurityWeek’s research, the server is hosted in Bucharest, Romania.
read more
Joint UK-US Exercise to Test Nuclear Infrastructure Against ‘Major’ Cyber Attack
The UK Government said it will conduct a joint exercise with the United States next year to test the security of civil nuclear infrastructure against a major cyber attack.
Set to be officially announced soon, the exercise will “simulate a cyber attack on nuclear power supplies” to see how the two allies can work together in the event of such a cyber threat.
read more
Is Enterprise Security Being Weighed Down by Point Solutions?
The cybersecurity industry is bubbling with new technologies that go after the threat du jour. The threat landscape has evolved, and cyber risk from organized crime and nation states represent a clear and present danger. The impact on enterprise security is severe. Our security is only as good as our ability to coherently and consistently put up a solid defense.
read more
Researchers Bypass Patch for Old IBM Java Flaw
A patch released by IBM in 2013 for a Java sandbox escape vulnerability can be easily bypassed, according to the security firm that discovered and reported the issue.
read more
Trump Hotels Investigating Another Possible Data Breach
Trump Hotel Collection has launched an investigation after financial institutions reported seeing fraudulent activity on payment cards used at its properties.
read more
US Tax Season Fuels Surge in Email Scams
As the US tax season draws to a close, authorities are warning of an alarming rise in "phishing" scams designed to steal sensitive personal and financial information.
read more
Is Passive Authentication the Future for User Authentication?
Passive Authentication May be the Future for User Authentication, and it's Just Beginning to Appear
read more
Rokku Ransomware Uses QR Codes for Easier Payment
Ransomware creators are increasingly focused on making victims pay a ransom, and Rokku, a new malware family in this segment, is the latest example.
read more
iOS App Patching Tool “Rollout” Prone to Abuse
Researchers at security firm FireEye have analyzed another hot-patching solution for iOS applications that could be abused by malicious actors to turn harmless apps into malware.
read more
