Reporting to CEO reduces risks and costs, but change comes slowly
An increasing number of experts are urging companies to stop having the CSOs and CISOs report to the CIO in order to reduce conflict of…
Telephonic DoS a smokescreen for cyberattack on Ukrainian utility
The late December telephonic denial-of-service attack against a Ukrainian power company was a smokescreen to cover up a cyber attack, experts say.”This is one of…
Report: Cybersecurity pros losing confidence
Security professionals were less confident in their security infrastructure in 2015 than in 2014, according to a report released today by Cisco.In 2014, 64 percent…
Linux zero-day affects most Androids, millions of Linux PCs
A new zero-day vulnerability has been discovered that allows Android or Linux applications to escalate privileges and gain root access, according to a report released…
Linux zero-day affects most Androids, millions of Linux PCs
A new zero-day vulnerability has been discovered that allows Android or Linux applications to escalate privileges and gain root access, according to a report released…
Security pros worried about stolen credentials, alert volumes
The majority of security organizations received more alerts than they can handle and don’t have a way to spot stolen credentials, according to a survey…
RIG exploit kit takes over while Angler on vacation
The Angler exploit kit went on vacation during the first two weeks of the year, but the Russia-hosted RIG exploit kit was there to ensure…
DDoS attack on BBC may have been biggest in history
Last week’s distributed denial of service attack against the BBC website may have been the largest in history.A group calling itself New World Hacking said…
Silent Circle patches Blackphone vulnerability
A report released this morning shows that no phone is 100 percent secure — but that one company, at least, is able to respond quickly…
Global geopolitical risk predictions for 2016
The previous 25 years have been marked by globalization. A number of forces acted together to bring our planet closer together. Trade pacts, peacekeeping alliances,…
PhishMe report shows employees can become assets in anti-phishing battle
A report released today by PhishMe based on the results of 8 million phishing simulations shows that employees can dramatically improve their ability to detect…
PhishMe report shows employees can become assets in anti-phishing battle
A report released today by PhishMe based on the results of 8 million phishing simulations shows that employees can dramatically improve their ability to detect…
Lost devices account for bulk of healthcare security incidents
Due to reporting guidelines, lost and stolen devices account for 45 percent of all breaches in Verizon’s new health care data breach report, accounting for…
Firms expect fines, new costs from Safe Harbor changes
IT budgets are expected to see a rumble of activity in the wake of the Safe Harbor earthquake.In a new Ovum survey of IT decision…
Darkode forum is back, but a shadow of its former self
Last summer, law enforcement agencies from 20 countries joined forces to shut down the notorious Darkode hacking forum. Organizers said they would be back, stronger…
Darkode forum is back, but a shadow of its former self
Last summer, law enforcement agencies from 20 countries joined forces to shut down the notorious Darkode hacking forum. Organizers said they would be back, stronger…
US cyber criminal underground a shopping free-for-all
According to a new report by Trend Micro, the North American cyber criminal underground isn’t buried as deep as in other geographies. “It doesn’t exist…
US cyber criminal underground a shopping free-for-all
According to a new report by Trend Micro, the North American cyber criminal underground isn’t buried as deep as in other geographies. “It doesn’t exist…
Report: Scripting languages most vulnerable, mobile apps need better crypto
According to an analysis of over 200,000 applications, PHP is the programming language with the most vulnerabilities, mobile apps suffer from cryptography problems, and developers…
Report: Scripting languages most vulnerable, mobile apps need better crypto
According to an analysis of over 200,000 applications, PHP is the programming language with the most vulnerabilities, mobile apps suffer from cryptography problems, and developers…
Most hackable devices
Consumer devices vulnerableThere are now more than 3 billion connected devices in use by consumers, according to Gartner, and this number will increase to 4…
Retailers targeted by sophisticated ModPOS malware
The ModPOS malware has already hit multiple national retailers and compromised millions of cards, according to new research released this morning, but there are likely…
OpenDNS listens for malicious melodies
Much like Pandora identifies patterns in music to come up with new songs that its users might like, OpenDNS is listening to the traffic patterns…
New ad-fraud botnet targets major corporations, universities
A new botnet is specifically targeting large corporations, taking over user machines to generate high-value ad fraud, according to a new report from Pixalate.The Xindi…
Exploit kit activity up 75 percent in third quarter 2015
In a sign of the increasing professionalization of the space, exploit kit activity increased 75 percent in the third quarter of this year compared to…
The dark side of layered security
Layered security is currently considered a best practice for enterprises, since a single layer of defense against attackers is no longer enough. Sometimes, however, these…
iOS apps more vulnerable than Android
Applications written for iOS devices have more vulnerabilities than those written for Androids, and this has the potential for security problems in the future as…
10 riskiest applications that have passed their expiration dates
ExpiredImage by ThinkstockApplications that have reached the ends of their lives are no longer maintained by their original developers, and do not receive security updates.…
10 risky software that have passed their expiration dates
ExpiredImage by ThinkstockApplications that have reached the ends of their lives are no longer maintained by their original developers, and do not receive security updates.…
9 of 10 directors support regulator action on cybersecurity
In a study released this morning, nine out of 10 corporate board members said that regulators should hold businesses liable for breaches if they haven’t…