News

Emerging cyberattacks and threats

• June 18, 2018 18 Jun'18

  PyRoMineIoT cryptojacker uses NSA exploit to spread

  The latest malware threat based on the EternalRomance NSA exploit is PyRoMineIoT, a cryptojacker infecting IoT devices. But experts said the NSA shouldn't be held responsible for the damages.

• May 31, 2018 31 May'18

  Risk & Repeat: Are ICS threats being overblown or ignored?

  In this week's Risk & Repeat podcast, SearchSecurity editors discuss dangers to critical infrastructure in the wake of a new report on the threat actors behind the Trisis malware.

• May 31, 2018 31 May'18

  Dragos' Robert Lee discusses latest ICS threats, hacking back

  In part two of this interview from RSA Conference 2018, Dragos CEO Robert Lee discusses the latest threats to industrial control systems and how those threats can be exaggerated.

• May 29, 2018 29 May'18

  Threat hunting technology is on the rise, so are threats

  Detection of advanced threats is the top challenge for 55% of security operations centers, according to a new survey, as more companies explore threat hunting programs.

• May 25, 2018 25 May'18

  Creators of Trisis malware have expanded their ICS attacks

  News roundup: Dragos researchers say the group behind the Trisis malware has expanded its ICS attacks. Plus, Roaming Mantis malware now targets iOS devices, and more.

• May 25, 2018 25 May'18

  Dragos' Robert Lee explains why ICS security isn't all doom and gloom

  Dragos' Robert Lee talks with SearchSecurity at RSA Conference 2018 about why there are reasons to be optimistic about the state of ICS security, despite growing threats.

• May 23, 2018 23 May'18

  Wicked botnet: Another Mirai variant targets connected devices

  Fortinet researchers uncovered a new variant of the Mirai malware, known as the Wicked botnet, which targets vulnerable IoT devices and uses multiple existing exploits.

• May 22, 2018 22 May'18

  Newly disclosed Spectre variant 4 brings more side channel concerns

  A new Spectre vulnerability was disclosed this week, adding to concerns about side channel attacks exploiting speculative execution in modern processors.

• May 22, 2018 22 May'18

  North Korean hackers linked to Google Play spyware

  The 'Sun Team' group of North Korean hackers placed malicious apps in the Google Play store to target defectors and steal personal data such as photos, contacts and SMS messages.

• May 16, 2018 16 May'18

  Illumio: Subtle data manipulation attacks pose serious threats

  Illumio CTO P.J. Kirner discusses the threat of data manipulation and explains why subtle, hard to detect attacks could have devastating effects on enterprises.

• May 11, 2018 11 May'18

  Hardware debug documentation leads to widespread vulnerability

  A hardware debug bug, apparently caused by unclear Intel hardware architecture documentation, infested almost all major OSes, as well as leading virtualization software.

• May 09, 2018 09 May'18

  Microsoft patches Internet Explorer zero-day 'Double Kill'

  Microsoft's Patch Tuesday for May includes fixes for two zero-day vulnerabilities under attack, including an Internet Explorer exploit known as Double Kill.

• May 03, 2018 03 May'18

  Cybersecurity pervasiveness subsumes all security concerns

  Given the increased digitization of society and explosion of devices generating data (including retail, social media, search, mobile, and the internet of things), it seems like it might have been ...

• April 30, 2018 30 Apr'18

  Windows NTFS flaw posted after disclosure gets nowhere

  Proof-of-concept code showing how an NTFS flaw can shut down Windows systems was published by a security researcher nine months after he disclosed it to Microsoft.

• April 26, 2018 26 Apr'18

  Philip Tully: AI cyberattacks, AI arms race are coming

  Malicious actors are working on AI cyberattacks and other ways to augment threat activity with AI. Philip Tully discusses how that can work and if enterprise security can keep pace.