Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
|
Cisco: Privacy Efforts Pay Off Directly
Cisco's research has proven that beyond meeting compliance requirements, good privacy is good for business and individuals.
All Your Intel L1 Cache Belongs to CacheOut
Once again, a novel 'speculative execution side-channel' attack has been discovered by researchers.
RDG Gets Fooled by UDP
Security researchers have found that the implementation in Remote Desktop Gateway of string segmentation lays it open to memory corruption vulnerabilities.
Ransomware Costs More in Q4
In Q4 of 2019, the average ransom payment increased by 104% to $84,116, finds Coveware report.
GE Medical Instrumentation on the Critical List
DHS-CISA has issued a security advisory about GE Carescape medical instrumentation that enumerates many vulnerabilities present in them.
EFS Ransomware Slips by AV Products
Inside of Windows is a methodology called Encrypting File System. It works on individual files or folders, rather than at the whole disk level like BitLocker does.
Reusing Code? Inspect It First
Microsoft is doing something concrete about container security with the release of the Microsoft Application Inspector, a cross-platform tool whose primary objective is to identify source code features in a systematic and scalable way.
FireEye Finds Mitigation of CVE-2019-19781 Comes With a Price
One threat actor is taking advantage of the current problems with Citrix ADC/Netscaler for their own advantage.
German Companies Want Even More Local Clouds
The European data infrastructure GAIA-X can help connect thedisparate needs of German firms and create market access for providers from the EU and beyond.
NSA Schools Microsoft About Crypto
In an unprecedented move, the National Security Agency advised Microsoft about a bug in one of the CryptoAPI libraries used since NT 4.0 days.
Donors to Australia Fire Site Treated as Suckers by Magecart
E-commerce fraud has no morals.
Things Get Intense for Citrix ADC/Gateway
Scans have found that there are almost 10,000 vulnerable Internet-facing hosts in the US, with 2500 in Germany and 2000 in the UK.
Despite Google's Efforts, Bread Isn't Toast
The authors of the Bread malware have proven themselves to be unrelenting in their efforts to avoid being first discovered by and then dumped from Google's Play Store.
Cheap Phone Has Cheap Security
Phone looks a steal a $35 but it comes with free, pre-installed malware!
Cloud Monitoring: The New 'Alert Overload' Problem & How to Fix It
While cloud computing offers a variety of proven business benefits, from a security perspective, IT teams are often still wavering in uncharted territory – and cloud monitoring is one such area.
Researcher Proven Right, but It Took 10 Years
After a decade of trying, security researcher Thierry Zoller has finally seen the generalized vulnerability he found in some AV products patched.
Why Cisco's DCNM Is in a World of Trouble
Vendor's Data Center Network Manager (DCNM) has racked up three critical authentication bypass vulnerabilities at the top of the list of 12 separate problems that were announced on January 2.
FPGAs Do It Faster Than CPUs
Researchers' use of a 'Jackhammer' exploit has shown again how one problem can be exploited in many ways, with each iteration of an attack becoming faster and more efficient.
Fortinet Finds Loader Uses Updated Version of Backdoor
Security firm Fortinet has found traces of how the financially motivated FIN7 group manages to keep on delivering the Carbanak backdoor malware.
Mac Malware Breaks Into Top 5 Threats of 2019 – Malwarebytes Labs
Of the top 25 detections across all platforms, six were Mac threats, the researchers discovered.
New Botnet Uses DHT as Its Foundation
Security researchers at 360 Netlab have been watching a new botnet they call Mozi for the last four months. It's a new P2P botnet with implementation that is based on the Distributed Hash Table protocol.
5G Security Rests on an Unstable Base
Positive Technologies has issued a report on the emerging security problems of 5G signaling networks.
Crystal Ball: The Top 3 Global Cybersecurity Threats for 2020
In the year ahead, organizations of all sizes must prepare for the unknown so they have the flexibility to withstand unexpected, high-impact cybersecurity events.
Happier Holidays as Ad Threat Declines
DEVCON report finds that the number of ad-threat JavaScript attacks in the US diminished year-over-year, but what attacks there were increased in sophistication.
RST Gets Fixed
Peleg Hadar of SaveBreach Labs has posted about the vulnerability he found in Intel's Rapid Storage Technology Service.
TrickBot Drops an Anchor
New threat has been used in campaigns against financial, manufacturing, and retail businesses across the US and Europe.
With Plundervolt, an Intel Processor's Secure Enclave Is No Longer Secure
Major hardware vulnerability can allow the changing of information that is supposedly stored as secure in the chip’s Secure Enclave.
Hardware Is the New Attack Surface – Forrester
Attackers have already begun to breach security at the BIOS level, according to a new report on BIOS security from Forrester Consulting.
Snatch Is Both Novel & Evil
The Sophos Managed Threat Response team found out that, where the Snatch ransomware is concerned, things just more ugly.
FBI's Portland Office Spies IoT Education Opportunity
The Federal Bureau of Investigation's office in Portland, Ore., uses 'Tech Tuesday' to offer IoT security advice.
CISA Alerts the Financial Sector About Dridex
One of the most prevalent threats to the financial sector, the Dridex Trojan, was the subject of a recent alert.
Zero-Day Vulnerabilities Discovered in Enterprise-Grade VPN
Aviatrix, an enterprise VPN company with customers that include NASA, Shell and BT, has recently dealt with a vulnerability that was uncovered by Immersive Labs researcher and content engineer Alex Seymour.
Europe Starts to Build Its Own Secure Cloud
The German Federal Government wants to join forces with other European partners to create a secure cloud for Europe called GAIA-X.
Azure OAuth 2.0 Vulnerability Grabs Tokens
Security firm CyberArk is now finally able to discuss a major OAuth 2.0 vulnerability that affects Microsoft Azure web services.
Spear Phishing: Don't Rise to the Bait, Says Microsoft
Be alert, be aware, and be careful about what you reveal of your company's internal processes on social media.
ATP Rises to the Polymorphic Malware Challenge
The Microsoft Defender ATP Research Team has begun to discuss a polymorphic threat, Dexphot, that it has been tracking for over a year.
The Top 25 Most Dangerous Software Errors
'Improper Restriction of Operations within the Bounds of a Memory Buffer' tops this year's list.
Solr Search Tool Can Allow Remote Code Execution (RCE) by Default
A security vulnerability affecting the Linux enterprise search tool Apache Solr has been reclassified by Tenable as 'high severity status.'
False Training Information Can Dupe Machine Learning Models
Researchers from Boston University have shown how really small amounts of disinformation can taint the learning process used by many AI programs.
Dangerous 'RIPlace' Exploit Able to Bypass AV & EDR Protections
Researchers discover way that ransomware can bypass the protections which operating system vendors have built into their products.
DePriMon: A New & Unique Way to Download Malware
ESET calls it 'a powerful, flexible and persistent tool.'
Artisans & Commercials Gang Up on Third Parties
Cybersecurity and intelligence firm AdvIntel has reported about a trend it has seen happening in the ransomware arena.
Phoenix Keylogger Rises & Steals Information
Keylogger first emerged in July 2019, and is packed with myriad information-stealing features.
MSFT Jumps on DoH
Microsoft has announced that an upcoming version of Windows 10 will have support for DNS over HTTPS.
Security & the Internet of Things: What You Need to Know
The Internet of Things (IoT) has burst into the connected world and promises much: from enabling the digital organization, to making domestic life richer and easier. However, with those promises come inevitable risks: the rush to adoption has highlighted serious deficiencies in both the security design of IoT devices and their implementation.
Iran Rustles Up Its Own VPN to Hide Itself
Trend Micro has found recent traces of APT33 operations, with about a dozen Command and Control servers being used for extremely narrow targeting.
Problems With EU Payment Security Persist
Proposed new security procedures within the EU have troubled some payment service providers, leading to the postponement of their implementation.
Keeping It Real Can Pay Off for Old-School Attacks
Even a previously known attack can fool the security team if it is well crafted.
How PureLocker Ransomware Bypasses AV Checks
Intezer and IBM X-Force have found a new ransomware targeted at production servers. And it's sneaky...
TCP DDoS Reflection Attacks on the Rise
Radware report picks up on a change in attacker strategy.
|
Understanding DNS Threats and How to Use DNS to Expand Your Cybersecurity ArsenalWith attacks and breaches on the rise, enterprise security teams need full visibility over what they have in their network. DNS is a key tool for visibility and asset discovery. Proactive DNS-layer security - such as using DNS data to mitigate threats that network-based controls may miss - is about blocking threats before they compromise the enterprise.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
0 Comments
