Technology Security flaw lets attackers recover private keys from Qualcomm chipsZDNet - Catalin Cimpanu Firmware patches have been released earlier this month, 46 Qualcomm chipsets impacted. × qualcomm.png Devices using Qualcomm chipsets, and especially …
Microsoft Microsoft admits expiring-password rules are uselessCNET - Ian Sherr Hey, IT staffers, are you listening?
Cybersecurity Two Charged with Economic Espionage, GE Trade Secret Theftdarkreading.com A US national and Chinese national have been charged with conspiring to steal General Electric's trade secrets surrounding turbine technologies. A …
Authentication Long Live the Password — Even if You Don't Want It Tosecurityintelligence.com In today’s interconnected world, we interact with applications and systems on myriad devices, from smartphones and tablets to desktop computers, baby …
Application Security Don't Let Vulnerabilities Leave You Taxed — Refund Customer Trust With Application Securitysecurityintelligence.com Ah April. Spring is in full tilt and flowers are blooming in the Northern Hemisphere, and it’s in the heart of autumn for friends in the Southern …
Information Security A Beginner’s Guide to PCI Compliancetripwire.com - Megan Freshley Apr 23, 2019 Regulatory Compliance Of course, a breach at a small business with little digital footprint has far less potential for public damage than a breach at a giant, …
'Five Eyes' Intelligence Members to Detail Cyber Threatsdatabreachtoday.com Scotland: For First Time, Secretive Alliance Group to Talk Together in Public Mathew J. Schwartz (euroinfosec) April 24, 2019 For the first time …
Kaspersky Lab 'ShadowHammer' Spreads Across Online Gaming Supply Chaindatabreachtoday.com Several Gaming Suppliers Are the Latest Victims, Kaspersky Finds Scott Ferguson (@Ferguson_Writes) April 24, 2019 A sophisticated supply-chain …
Android News Adware-Ridden Apps in Google Play Infect 30 Million Android Usersthreatpost.com - Lindsey O'Donnell More than 50 malicious apps have been discovered on the Google Play app marketplace, peddling adware to millions of Android victims. The 50 adware …
Latest Qbot Variant Evades Detection, Infects Thousandsthreatpost.com - Tom Spring Qbot, an information-stealing trojan that has been around for 10 years, has resurfaced again with a new phishing-based infection technique that is …
Kaspersky Lab Point Blank Gamers Targeted with Backdoor Malwarethreatpost.com - Tara Seals The efforts of the APT behind the ShadowHammer supply-chain attack that abused the ASUS computer update function turns out to be wider in scope than …
Rockwell Controller Flaw Allows Hackers to Redirect Users to Malicious Sitessecurityweek.com A serious vulnerability affecting some of Rockwell Automation’s MicroLogix and CompactLogix programmable logic controllers (PLCs) can be exploited by …
FlipboardIcon version of the Flipboard logo Chrome 74 Patches 39 Vulnerabilitiessecurityweek.com Google this week released Chrome 74 to the stable channel with patches for 39 vulnerabilities, as well as with several other tweaks inside. Of the 39 …
6 Ways Attackers Are Still Bypassing SMS 2-Factor Authenticationsecurityweek.com 1992 was both an ending and a beginning. It was the year I lost my beloved grandfather, and I’ll never forget his final words to me: “Stop shaking …
FlipboardIcon version of the Flipboard logoCybersecurity Survey Shows a Security Conundrumdarkreading.com A new report examines and quantifies the conflicts and challenges faced by business security leaders. A new survey illustrates how security executives …
FlipboardIcon version of the Flipboard logoAPIs 5 Security Challenges to API Protectiondarkreading.com Today's application programming interfaces are no longer simple or front-facing, creating new risks for both security and DevOps. All APIs are …
Technology Hacker Can Monitor Cars And Kill Their Engines After Breaking Into GPS Tracking AppsVICE - Lorenzo Franceschi-Bicchierai“I can absolutely make a big traffic problem all over the world,” the hacker said. A hacker broke into thousands of accounts belonging to users of two GPS tracker apps, giving him the ability to monitor
Technology Chrome update stops websites from tracking you in Incognito ModeEngadget - Rachel EnglandBut you'll have to enable the feature yourself. Google has launched Chrome 74 for Windows, Mac, Linux, Android and iOS, bringing with it a bunch of handy new features, although some -- such as Incognito
Cybersecurity AI's Top Use in 2018 Was in Cybersecurity ApplicationsPCMag - Kyle Kucharski The Why Axis Data suggests that artificial intelligence was put to work in a cybersecurity capacity more than in any other area of service last year. …
FlipboardIcon version of the Flipboard logoCybersecurity Attackers Aren't Invincible We Must Use That to Our Advantagedarkreading.com The bad guys only seem infallible. Use their weaknesses to beat them. Looks like you've hit your article limit. Please or register for a free account …
Technology DNSpionage campaign releases new Karkoff malware into the wildZDNet - Charlie Osborne In a change of tactic, victims are also now being selectively targeted. The hacking group behind the DNSpionage campaign have become more choosy in …
Microsoft Azure Sentinel: Microsoft's thoroughly modern SIEMTechRepublic - Simon Bisson Microsoft's new cloud-hosted security information and event management service rolls out in a public preview. As infrastructures get ever more …
Cybersecurity New Twist in the Stuxnet Storydarkreading.com - Kelly Jackson Higgins Executive Editor at Dark Reading What a newly discovered missing link to Stuxnet and the now-revived Flame cyber espionage malware add to the narrative of the epic cyber-physical …
Mobile Mobile Security Risks Are on the Rise, But Employers Continue to Cut Cornerssecurityintelligence.com Mobile devices have taken over the enterprise. Ninety-five percent of us own a cellphone, and a full 100 percent of people between the ages of 18–29 …
Distributed Systems How to Shift Security Practices From Monitoring to Observabilitydatabreachtoday.com April 23, 2019 Is 'Observability' just a disingenuous rebrand of 'monitoring'? Is it monitoring on steroids? Or, is it the new way to find out "why" …
Source Code Carbanak Source Code Unveils a Startlingly Complex Malwarethreatpost.com - Tara Seals A look under the hood of FIN7’s notorious Carbanak backdoor – the result of nearly 500 total hours of analysis across 100,000 lines of code and …
War Exploits for Social Warfare WordPress Plugin Reach Critical Massthreatpost.com - Tara Seals Active exploits for a recently disclosed bug in a popular WordPress plugin, Social Warfare, are snowballing in the wild – potentially putting more …
FlipboardIcon version of the Flipboard logo Vietnam-Linked Hackers Use Atypical Executables to Avoid Detectionsecurityweek.com OceanLotus, a Vietnam-linked cyber-espionage group, has been using atypical executable formats in an attempt to avoid detection and hinder analysis, …
FlipboardIcon version of the Flipboard logo Shifting to DevSecOps Is as Much About Culture as Technology and Methodologysecurityweek.com This move to container-based development and agile methodologies has been great for innovation and iteration, but it’s also brought a massive shift …
