Network World

As buildings get smarter and increasingly connected to the Internet, they become a potential vector for attackers to target.IBM’s X-Force ethical hacking team recently ran a penetration test against a group of office buildings using building automat…

The majority of cyber attackers are motivated by money, but make less than $15,000 per successful attack, according to a survey of hackers in the U.S., U.K. and Germany released yesterday by the Ponemon Institute.The hackers, who were promised anony…

An increasing number of experts are urging companies to stop having the CSOs and CISOs report to the CIO in order to reduce conflict of interest, risk, even downtime and financial losses, but there hasn’t yet been much evidence of progress.To read this…

The late December telephonic denial-of-service attack against a Ukrainian power company was a smokescreen to cover up a cyber attack, experts say.”This is one of the more common reasons why these attacks are done,” said Rene Paap, product marketing …

A new zero-day vulnerability has been discovered that allows Android or Linux applications to escalate privileges and gain root access, according to a report released this morning by Perception Point.”This affects all Android phones KitKat and highe…

Last week’s distributed denial of service attack against the BBC website may have been the largest in history.A group calling itself New World Hacking said that the attack reached 602Gbps. If accurate, that would put it at almost twice the size of t…

Last summer, law enforcement agencies from 20 countries joined forces to shut down the notorious Darkode hacking forum. Organizers said they would be back, stronger than ever.Security researchers have been keeping an eye out for its resurgence ever …

According to a new report by Trend Micro, the North American cyber criminal underground isn’t buried as deep as in other geographies.”It doesn’t exist in the dark web as much as other undergrounds do, or practice as much security,” said Tom Kellerma…

ExpiredImage by ThinkstockApplications that have reached the ends of their lives are no longer maintained by their original developers, and do not receive security updates. However, many users forget to remove these applications from their machines, or…

Despite recent moves against Adobe Flash by Google and Firefox and its declining use by websites, Adobe Flash remains a significant security vulnerability for end users, with 80 percent of computers running an end-of-life version of the plugin.Accor…

The other day, I was in a room full of CIOs, CTOs and CISOs who — as an ice-breaking activity — were asked to share a bad security habit. One after the other admitted to bad password hygiene, such as reusing passwords.I was the only one in the roo…

Containers offer a quick and easy way to package up applications and all their dependencies, and are popular with testing and development.According to a recent survey sponsored by container data management company Cluster HQ, 73 percent of enterpris…

There’s a new botnet malware on the loose, called Corebot, that researchers believe has the potential to develop into a significant threat.The malware was first spotted by IBM Security X-Force, and Damballa followed up with a deep dive into how the …