[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Half of All Orgs Hit with Ransomware in 2017
Of the companies that refused to pay the ransom, a full 87% recovered their data.
> FlawedAmmyy RAT Takes Over Desktops
The RAT creates opportunities for actors to steal customer data, proprietary information and more.
> SVE-2017-8975: TOCTOU Race Condition in Samsung TrustZone SCrypto Driver
Summary Due to a race condition in input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow. The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCryp...
> Mobile Ad Trojans Evolve to Maximize Profits
With root privileges, they can secretly install various applications or bombard an infected device with ads to make use of the smartphone impossible.
> Experts: UK Gov’s IoT Security Guidelines Must Go Further
Security industry wants more than voluntary guidelines
> SVE-2017-8974: TOCTOU Race Condition in Samsung TrustZone SCrypto Driver
Summary Due to a race condition in input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow. The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCryp...
> Two-Thirds of IT Leaders Consider Consumer-Grade Access to Workplace Cloud Services
Nine in 10 IT decision makers think ineffective cloud access management creates issues for the business
> Dark Web Experts: ID Fraudsters Unaffected by Police Efforts
AlphaBay/Hansa takedown has forced scammers to be more creative, says Terbium Labs
> SVE-2017-8973: Buffer Overflow in Samsung TrustZone SCrypto Driver
Summary Due to missing input validation, the SCrypto implementation of the drTima secure driver (uuid ffffffffd0000000000000000000000a) was susceptible to a buffer overflow. The drTima secure driver implements a fully featured crypto engine entirely in software, called SCrypto. The SCrypto APIs are...
> New Record 1.7Tbps DDoS Also Abused Memcached Servers
Experts urge organizations to correct insecurely configured systems
> Kaspersky Lab Adds $100K Payout to Bug Bounty Program
The new top-end award will be for the discovery and responsible disclosure of severe vulnerabilities in some of the firm’s flagship products.
> Gozi Trojan Turns to Dark Cloud Botnet
The campaigns are relatively low volume and targeted to specific organizations, with some of the mails even being localized.
> Poor User Practice at the Root of Most Medical Device Security Risks
Use of unauthorized applications (22%) and browsers (18%) are the leading security risks.
> Applebee’s Hit by POS Malware
Over 160 US restaurants in RMH franchise are affected
> Non-Profit Aims to Bring More Military Vets into Cyber Roles
TechVets could help reduce chronic skills shortages
> Crypto-Mining Attacks Jump 50% to Net Hackers Millions in 2017
Kaspersky Lab claims attackers are using increasingly sophisticated tactics
> NIS America Suffers Card Breach, Offers Store Credit
The attack resulted in the theft of payment-card details and address information.
> Malware Authors Turn to DNS Protocol as a Covert Channel
DNS command and control (C&C) and DNS exfiltration can be successful because DNS is an integral part of the internet's infrastructure.
> It Could Happen to Anyone: FS-ISAC Falls for a Phish
The financial industry's forum for collaboration on critical security threats was compromised with an unsophisticated phish.
> #GartnerIAM: Common Privilege Pitfalls Are Easily Overcome
There has never been a greater need for PAM