News

April 16, 2018 16 Apr'18
SSH announces new key and certificate management service

A new key and certificate management service is now offered by SSH, which teamed up with AppViewX to provide a way to administer cryptographic keys and digital certificates.
April 16, 2018 16 Apr'18
CrowdStrike Falcon X takes aim at incident response

CrowdStrike introduced a new component for the vendor's cloud-based security platform -- dubbed Falcon X -- that looks to speed up enterprises' incident response times.
April 16, 2018 16 Apr'18
Nuix hacker survey shows how easy it is to breach perimeters

The second annual Black Report -- a hacker survey aimed at getting a different perspective on cybersecurity -- detailed how long it takes to breach a perimeter and what attacks are easiest.
April 13, 2018 13 Apr'18
A UPnP vulnerability hides bad traffic in a new way

News roundup: Home routers are susceptible to a UPnP vulnerability that proxies bad traffic in a new way. Plus, AMD and Microsoft released patches for the Spectre flaw, and more.
April 13, 2018 13 Apr'18
Cybersecurity AI hype matures at RSAC 2018

Top submissions to the RSA Conference 2018 indicate that the hype cycle around cybersecurity AI may be maturing, while diversity gets a lower ranking on the hot topic list.
Sponsored News
- It’s Time to Modernize Your SOC
  
  Sponsored by Microsoft - With the shift to remote work caused by COVID-19, Security Operations Centers (SOCs) are under more pressure than ever, particularly with many SOC workers also working from home. Today’s reality is that SOCs have to embrace a new way of working in order to keep their analysts and admins effective and to ensure that morale doesn’t collapse under the weight of too much work and pressure. See More
- 6 Factors to Consider in Building Resilience Now
  
  Sponsored by Microsoft - COVID-19 has been, and continues to be, a stark reminder of the importance of business resilience. Organizations of all types and sizes have had to adjust to rapidly changing and unpredictable circumstances: A shift to remote work, supply chain disruptions, new digitally driven business models and an environment where uncertainty is the rule, not the exception. See More
- Why Zero Trust, Why Now
  
  Sponsored by Microsoft - The concept of a Zero Trust cybersecurity architecture has been around for more than a decade, but adoption didn’t really begin to take hold until the past couple of years. As with many technology innovations, it hasn’t always been clear just what Zero Trust is all about and, more important, how to implement it easily and cost effectively. See More
- 5 Best Practices To Secure Remote Workers
  
  Sponsored by Microsoft - The impact of COVID-19 has changed the dynamics and landscape of remote work for at least the foreseeable future and, probably, forever. All of a sudden, organizations across all industries had to scale remote workers at unprecedented intensity and speed. See More
View All Sponsored News
April 12, 2018 12 Apr'18
Risk & Repeat: RSAC 2018 trends focus on AI, blockchain

In this week's Risk & Repeat podcast, SearchSecurity editors discuss the big questions ahead of RSA Conference 2018, as well as notable sessions and speakers scheduled for the event.
April 12, 2018 12 Apr'18
Cryptojacking attacks may not challenge ransomware dominance

Cryptojacking attacks are on the rise, but experts are unsure if the threat can overtake the malware dominance of ransomware due to regulatory and profit questions.
April 11, 2018 11 Apr'18
Ransomware threat tops Verizon Data Breach Report

After years of climbing the ranks in the Verizon Data Breach Investigations Report, the ransomware threat has finally taken the top spot as the most prevalent malware type.
April 11, 2018 11 Apr'18
RSAC 2018: Special conference coverage

Find out what's happening at the information security industry's biggest event with breaking news and analysis by the SearchSecurity team at the RSA Conference 2018 in San Francisco.
April 10, 2018 10 Apr'18
WebAuthn API gets standards nod from W3C, FIDO Alliance

W3C and the FIDO Alliance have given websites a new tool for doing FIDO-compliant authentication, as the WebAuthn authentication protocol is promoted to W3C Candidate Recommendation.
April 06, 2018 06 Apr'18
Misconfigured cloud storage leaves 1.5B files exposed

Researchers found misconfigured cloud storage across multiple platforms left huge amounts of data exposed, including medical information and payroll data.
April 06, 2018 06 Apr'18
Risk & Repeat: New revelations in San Bernardino iPhone case

In this week's Risk & Repeat podcast, SearchSecurity editors discuss the OIG report's findings on the FBI's effort to unlock the iPhone of one of the San Bernardino terrorists.
April 06, 2018 06 Apr'18
Pipeline cyberattack shuts down natural gas company communications

News roundup: A pipeline cyberattack shut down communications for several U.S. natural gas providers. Plus, Facebook removed accounts and pages run by the Russian IRA, and more.
April 06, 2018 06 Apr'18
Microsoft created Windows Defender flaw by breaking UnRAR code

Microsoft's poor coding when forking and modifying open source UnRAR code introduced a critical Windows Defender flaw that could allow an attacker full system rights.
April 05, 2018 05 Apr'18
Intel's Spectre microcode patch not coming for older chips

No Spectre microcode patches will be coming for older Intel processors, but the newest generation of Intel CPUs will have mitigations built in when they ship later this year.
April 03, 2018 03 Apr'18
Cloudflare 1.1.1.1 DNS promises more private web browsing

Cloudflare promises its new 1.1.1.1 DNS service is faster and enables better privacy for web browsing than competing offerings, but it's unclear how different its service will be.
March 31, 2018 31 Mar'18
Privacy protections are needed for government overreach, too

Following the Facebook-Cambridge Analytica controversy, major tech companies pledged to defend users from corporate data misuse, but they're ignoring a more serious privacy threat.
March 30, 2018 30 Mar'18
Kaspersky KLara malware hunter now open source

Kaspersky's KLara tool has been made open source in an effort to help security professionals search related malware samples more easily and efficiently with distributed Yara rules.
March 30, 2018 30 Mar'18
Apple GDPR privacy protection will float everyone's privacy boat

With its embrace of new tools for protecting consumer privacy, Apple GDPR privacy protection will be available to all users as the EU's new privacy protection legislation is set to start ...
March 30, 2018 30 Mar'18
OIG report on San Bernardino iPhone case criticizes FBI

A new government report claims poor communication was to blame for the FBI's court case being filed against Apple despite a San Bernardino iPhone unlock method being almost ready at the time.
March 30, 2018 30 Mar'18
Risk & Repeat: IBM Think 2018 highlights AI, blockchain

In this week's Risk & Repeat podcast, SearchSecurity editors recap IBM Think 2018 and discuss Watson's Law and Big Blue's pledge to keep user data safe from misuse and exposure.
March 30, 2018 30 Mar'18
New Facebook privacy features and bug bounty aim to repair damage

News roundup: New Facebook privacy features and updates to the company's bug bounty program are being rolled out. Plus, Drupalgeddon 2.0 threatens over 1 million sites, and more.
March 29, 2018 29 Mar'18
RSA Innovation Sandbox highlights threat detection, AI

Security startups competing in this year's RSA Innovation Sandbox will present new offerings for threat detection, cloud security, artificial intelligence and machine learning.
March 28, 2018 28 Mar'18
Windows Meltdown patches open up more severe issue

A security researcher discovered the recent Windows Meltdown patches may fix the Intel flaws, but also introduced a more severe vulnerability in some versions of Windows.
March 27, 2018 27 Mar'18
RSA Conference keynotes miss the point of diversity

RSA Conference keynotes now include a handful of distinguished women, but very few will be speaking about cybersecurity, falling short of truly equal representation.
March 27, 2018 27 Mar'18
Five days after Atlanta ransomware attack, recovery begins

After battling the fallout from an Atlanta ransomware attack for five days, Mayor Keisha Bottoms said City Hall has finally begun to recover and turn systems back on.
March 27, 2018 27 Mar'18
TLS 1.3 update is finalized with encryption upgrade

The IETF approves the TLS 1.3 encryption protocol upgrade after four years and 28 versions; improvements include better security and performance, as well as middlebox support.
March 23, 2018 23 Mar'18
CLOUD Act stirs tension between privacy advocates and big tech

Privacy advocates criticize Congress for passing the CLOUD Act as part of the omnibus spending bill, while big tech companies have expressed support for the controversial legislation.
March 23, 2018 23 Mar'18
CSO Stamos leaving Facebook, according to reports

News roundup: Is Alex Stamos leaving Facebook? The CSO hasn't confirmed, but reports say yes. Plus, an Orbitz breach exposed the payment card data of 880,000 people, and more.
March 23, 2018 23 Mar'18
AMD patches for Ryzen chip flaws due 'in the coming weeks'

AMD patches are in the works for the Ryzen and EPYC chip flaws announced without the normal disclosure, but CTS Labs continues to stress the severity of the issues.
March 22, 2018 22 Mar'18
Watson's Law: IBM preaches data stewardship as A.I. advances

At IBM's Think conference, executives discussed the importance of protecting and managing data as artificial intelligence offerings like Watson grow and touch more information.
March 22, 2018 22 Mar'18
SAP CSO Justin Somaini on using blockchain for security

Blockchain has generated both hype and skepticism, but SAP CSO Justin Somaini believes the technology has applications for security that can improve open source software.
March 21, 2018 21 Mar'18
Durov refuses to hand over Telegram encryption keys to FSB

CEO Pavel Durov continued to assert that Telegram encryption keys will not be shared with the FSB, despite the Russian Supreme Court denying the company's appeal.
March 21, 2018 21 Mar'18
Risk & Repeat: OURSA takes RSA Conference to task

In this week's Risk & Repeat podcast, SearchSecurity editors discuss the emergence of OURSA to highlight diversity and the RSA Conference's lack of female keynote speakers.
March 21, 2018 21 Mar'18
Firefox bug exposes passwords to brute force -- for nine years

A Firefox bug exposing the browser's master password to a simple brute force attack against inadequate SHA-1 hashing is still on the books after nearly nine years.
March 21, 2018 21 Mar'18
How machine learning anomaly detection works inside SAP

SAP CSO Justin Somaini discusses how SAP uses machine learning for security tasks, like anomaly detection, and compares supervised and unsupervised algorithms.
March 20, 2018 20 Mar'18
Illegitimate Facebook data harvesting may have affected elections

A whistleblower claims a company with suspicious motives exploited Facebook data harvesting to build profiles on 50 million users and influence the 2016 U.S. presidential election and Brexit vote.
March 20, 2018 20 Mar'18
IBM outlines visions for crypto anchors, lattice cryptography

At IBM's Think conference, Big Blue researchers discussed new security-centric projects around blockchain databases, crypto anchors and quantum-resilient encryption.
March 16, 2018 16 Mar'18
Russian government hacking earns U.S. sanctions, warnings

The U.S. Treasury Department levied sanctions for Russian government hacking, as a joint alert from the FBI and DHS confirms election meddling and critical infrastructure attacks.
March 16, 2018 16 Mar'18
Following Equifax data breach, executive charged with insider trading

News roundup: A CIO has been charged with insider trading after the Equifax data breach. Plus, Trump blocked Broadcom's acquisition of Qualcomm, and more.
March 16, 2018 16 Mar'18
Leaked report on AMD chip flaws raises ethical disclosure questions

Researchers announced AMD chip flaws without the coordinated disclosure procedure, and a leak of the research to a short seller has raised further suspicions about the process.
March 14, 2018 14 Mar'18
Risk & Repeat: Assessing the Memcrashed attacks

In this week's Risk & Repeat podcast, SearchSecurity editors discuss the Memcrashed exploit and the recent trend of record-setting DDoS attacks against enterprises.
March 13, 2018 13 Mar'18
Researchers claim AMD flaws threaten Ryzen, EPYC chips

Ryzen and EPYC AMD flaws were partially detailed with just 24 hours' disclosure notice, despite potentially significant exploits, including secure processor takeover or security bypass.
March 13, 2018 13 Mar'18
Binance bounty offered for info on attempted attack

A failed attack led to a Binance bounty offer of $250,000 for information that leads to the arrest of the threat actors responsible for the attempted cryptocurrency theft.
March 12, 2018 12 Mar'18
Olympic Destroyer was a false flag cyberattack, research claims

New research claims Olympic Destroyer was not the work of the North Korea-backed Lazarus Group; rather, it was a false flag cyberattack designed to mislead attribution efforts.
March 09, 2018 09 Mar'18
Tenable introduces Lumin cyber exposure platform

Tenable.io Lumin enables organizations to gauge their 'cyber exposure' to vulnerabilities and allows them to compare remediation efforts against industry benchmark data.
March 09, 2018 09 Mar'18
OURSA takes on RSA Conference to highlight diversity

News roundup: Our Security Advocates emerges amid criticism of RSA Conference's lack of female keynote speakers. Plus, a kill switch is discovered for the Memcrashed DDoS exploit, and more.
March 09, 2018 09 Mar'18
DHS cybersecurity audit scores below target security levels

A DHS cybersecurity audit for FISMA compliance by the Office of Inspector General rated the agency below target levels in three of five areas of information security.
March 08, 2018 08 Mar'18
NSA tracking program watched foreign hackers in action

Researchers discovered evidence of an NSA tracking program designed to watch nation-state hackers and gather information as attacks were in progress.
March 07, 2018 07 Mar'18
McAfee cloud security platform expands to Microsoft Azure

In its first move following the acquisition of cloud access security broker Skyhigh Networks, McAfee extended its cloud security platform to Microsoft Azure customers.
March 07, 2018 07 Mar'18
Risk & Repeat: Trustico certificate drama a cause for concern

In this week's Risk & Repeat podcast, SearchSecurity editors discuss how a controversial move by reseller Trustico led to 23,000 Symantec SSL certificates being revoked.
March 06, 2018 06 Mar'18
Terabit DDoS attack hits 1.7Tbps and experts expect higher

Five days after a record breaking terabit DDoS attack, a new 1.7Tbps DDoS attack was detected taking advantage of improperly secured memcached servers to launch a reflection attack.
March 06, 2018 06 Mar'18
Equifax data breach affected 2.4 million more consumers

The massive Equifax data breach affected even more people. The startling total is now 147.9 million U.S. consumers who had their information stolen by hackers.
March 02, 2018 02 Mar'18
Cellebrite claims it can unlock Apple devices, but questions remain

News roundup: Cellebrite claims it can unlock Apple devices, according to a Forbes report. Plus, iCloud encryption keys will now be stored in China, and more.
March 02, 2018 02 Mar'18
23,000 Symantec certificates revoked following leak of private keys

DigiCert revoked 23,000 Symantec SSL certificates amid a public spat between the company and former reseller partner Trustico, which claimed the certificates were 'compromised.'
March 01, 2018 01 Mar'18
Memcrashed DDoS amplification exploits memcached UDP port

Memcrashed, a devastating new DDoS amplification attack that exploits UDP port 11211, is only possible when memcached servers are exposed to the public internet.
February 28, 2018 28 Feb'18
Visa reports EMV chip cards thwart fraud, but criminals adapting

Visa points to a 70% drop in fraud due to EMV chip cards, as consumers and merchants adopt the new payment card technology. But criminals are shifting their own focus to adapt.
February 27, 2018 27 Feb'18
New SAML vulnerability enables abuse of single sign-on

Duo Security discovered a new SAML flaw affecting several single sign-on vendors that allows attackers to fool SSO systems and log in as other users without their passwords.
February 27, 2018 27 Feb'18
Risk & Repeat: Is the cyberthreat landscape shifting to cryptomining?

In this week's Risk & Repeat podcast, SearchSecurity editors discuss how new attacks, like cryptojacking, may be supplanting previous top cyberthreats, such as ransomware.
February 27, 2018 27 Feb'18
Ad network cryptojacking attack bypasses ad blockers

Qihoo 360's Netlab team discovered an online ad network has been bypassing ad blockers and running cryptomining software in the browsers of unsuspecting visitors.
February 23, 2018 23 Feb'18
Facebook's 2FA bug lands social media giant in hot water

Facebook came under fire after a two-factor authentication bug sent non-security notifications to users' phones, sparking a debate about media coverage and 2FA adoption.
February 23, 2018 23 Feb'18
Hackers used SWIFT-based attacks to steal millions from banks

News roundup: Hackers once again used SWIFT-based attacks to steal millions from Russian and Indian banks. Plus, hackers used an L.A. Times website for cryptojacking, and more.
February 22, 2018 22 Feb'18
SEC cybersecurity disclosure rules get a guidance update

The U.S. Securities and Exchange Commission introduced new SEC cybersecurity disclosure rules to prevent insider trading related to data breaches and other security incidents.
February 22, 2018 22 Feb'18
GDPR data breach notification is just one piece of EU privacy puzzle

With the EU's General Data Protection Regulation looming, Qualys' Darron Gibbard discusses GDPR data breach notifications, and more with the EU's new privacy law.
February 21, 2018 21 Feb'18
Cryptojacking attacks hit enterprises' cloud servers

Cloud security vendor RedLock discovered threat actors had gained access to several enterprise cloud environments, including Tesla's, and used them for cryptojacking schemes.
February 21, 2018 21 Feb'18
Risk & Repeat: Intel bug bounty tackles side channel attacks

In this week's Risk & Repeat podcast, SearchSecurity editors examine Intel's new bug bounty for side channel attacks and what it says about Meltdown and Spectre.
February 21, 2018 21 Feb'18
Google discloses Microsoft Edge vulnerability without a patch

Google's Project Zero publicly published an Edge browser vulnerability after the 90-day disclosure deadline expired, and Microsoft has yet to patch the flaw.
February 19, 2018 19 Feb'18
Risk & Repeat: Cyberinsurance market gets a shake-up

In this week's Risk & Repeat podcast, SearchSecurity editors discuss a new industry partnership designed to give Apple and Cisco customers beneficial cyberinsurance policies.
February 16, 2018 16 Feb'18
Olympic Destroyer malware more complex than first thought

News roundup: The Olympic Destroyer malware is more sophisticated than researchers first thought. Plus, Microsoft looks to change identity management with blockchain, and more.
February 16, 2018 16 Feb'18
SonicWall spots Meltdown exploits with machine learning tech

SonicWall says its new deep memory inspection technology, which powers the vendor's Capture Cloud sandbox service, can block Meltdown threats and other zero-day attacks.
February 15, 2018 15 Feb'18
Intel bug bounty programs widened after Meltdown and Spectre

Intel's bug bounty program expanded its scope and rewards for bugs across all Intel products, and the company added a new program for side-channel flaws like Meltdown and Spectre.
February 14, 2018 14 Feb'18
Microsoft: Windows Analytics can detect Meltdown and Spectre exposure

Microsoft says Meltdown and Spectre vulnerabilities are now being tracked by Windows Analytics, which shows users the update status for CPU microcode and OS patches.
February 14, 2018 14 Feb'18
Equifax breach worsens, additional consumer data exposed

The Equifax breach compromised even more consumer data, including tax identification numbers, than originally reported. But the credit rating agency didn't disclose the update.
February 14, 2018 14 Feb'18
Zero-day Telegram vulnerability exploited for cryptomining

Kaspersky Lab disclosed a zero-day vulnerability in Telegram that the security vendor says was abused by Russian cybercriminals in a cryptomining malware campaign.
February 13, 2018 13 Feb'18
Critical Broadcom flaws discovered in Lenovo ThinkPads

Two critical flaws in Broadcom Wi-Fi chips disclosed last year were thought to affect only Apple and Android devices, but Lenovo now says ThinkPad models are vulnerable, too.
February 09, 2018 09 Feb'18
Apple's confidential iBoot source code leaked online

News roundup: Apple's highly protected iBoot source code was leaked online. Plus, the U.S. Consumer Financial Protection Bureau stops its Equifax breach investigation, and more.
February 08, 2018 08 Feb'18
Symantec's untrusted certificates: How many are still in use?

A security researcher found that a significant number of popular websites are still using untrusted certificates from Symantec, which will be invalidated this year.
February 08, 2018 08 Feb'18
DoJ breaks up Infraud Organization with some help

The U.S. Department of Justice announced the shutdown of the Infraud Organization, which authorities claim is responsible for global cyberfraud losses in excess of $530 million.
February 07, 2018 07 Feb'18
Grammarly vulnerability exposed user documents

A Grammarly vulnerability in its browser extension authentication could have exposed users' sensitive documents if the popular spelling and grammar checker were left unpatched.
February 07, 2018 07 Feb'18
Risk & Repeat: Cryptomining malware on the rise

In this week's Risk & Repeat podcast, SearchSecurity editors discuss how the threat of cryptomining malware is evolving and what it means for enterprises and infosec vendors.
February 07, 2018 07 Feb'18
Cybersecurity insurance breaks coming for Apple, Cisco customers

Apple and Cisco customers could get lucrative terms for cybersecurity insurance under a new partnership with insurance giant Allianz and global services firm Aon.
February 05, 2018 05 Feb'18
Cryptojacking malware using EternalBlue to build botnets

Proofpoint researchers discovered a large Monero mining botnet that uses EternalBlue to spread, and it isn't the first time the Windows flaw has been used for cryptojacking.
February 02, 2018 02 Feb'18
Hackers use ATM jackpotting technique to steal $1M in US

News roundup: Hackers used ATM jackpotting attacks to steal over $1M in the U.S. Plus, a fitness tracking app accidentally exposed the locations of military bases, and more.
February 01, 2018 01 Feb'18
Meltdown and Spectre malware discovered in the wild

Nearly 140 samples of malware that exploit the Meltdown and Spectre vulnerabilities have been discovered by AV-TEST, but most samples are based on existing proof-of-concept code.
January 31, 2018 31 Jan'18
Google got faster pulling bad Android apps from Play Store

Google claims it is faster than ever at removing or rejecting bad Android apps from the Play Store before anyone has a chance to install the troublesome app.
January 30, 2018 30 Jan'18
Critical Cisco ASA vulnerability patched against remote attacks

Experts urge users to patch a new Cisco ASA vulnerability that earned the most critical CVSS score of 10.0 and could lead to remote code execution and denial-of-service attacks.
January 30, 2018 30 Jan'18
New Comodo CA leadership talks competition, IoT devices

Comodo CA's new chairman Bill Conner and CEO Bill Holtz talk with SearchSecurity about competition in the certificate market and how the internet of things will fuel growth.
January 30, 2018 30 Jan'18
Microsoft rushes Spectre patch to disable Intel's broken update

Microsoft was forced to release an out-of-band Spectre patch designed not to mitigate the vulnerability but to protect users from Intel's broken fix.
January 26, 2018 26 Jan'18
Intel Spectre vulnerability memo raises questions of OEM disclosures

Intel first learned of the Spectre vulnerabilities on June 1, but a confidential document shows the chipmaker didn't inform OEM partners until almost six months later.
January 26, 2018 26 Jan'18
FBI encryption argument draws fire from senator

Sen. Ron Wyden challenged the FBI encryption argument and asked the FBI director to be transparent about claims that lawful access could be provided securely.
January 26, 2018 26 Jan'18
A series of new IoT botnets plague connected devices

News roundup: New IoT botnets compromise tens of thousands of devices worldwide. Plus, Kaspersky Lab filed an injunction against DHS, mobile POS gets a PCI standard, and more.
January 26, 2018 26 Jan'18
Blizzard security flaw should put game developers on notice

A newly-discovered Blizzard security bug, which affected all of the company's popular PC games including Overwatch, should serve as a warning for the video game industry.
January 25, 2018 25 Jan'18
Electron framework flaw puts popular desktop apps at risk

The Electron framework -- used to develop desktop apps using web code -- included a remote code execution flaw that was passed on to popular apps like Slack.
January 25, 2018 25 Jan'18
Comodo calls out Symantec certificate issues, applauds Google

Bill Conner and Bill Holtz, who recently joined Comodo CA as chairman and CEO, respectively, discuss Symantec's certificate issues and their effect on the certificate market.
January 24, 2018 24 Jan'18
Risk & Repeat: Backdoor access, strong encryption debate rolls on

In this week's Risk & Repeat podcast, SearchSecurity editors discuss the FBI's continued criticism of encrypted devices and the risks of vendor-created backdoor access points.
January 23, 2018 23 Jan'18
Gemalto Sentinel flaws could lead to ICS attacks

Security researchers found 14 vulnerabilities in Gemalto Sentinel hardware tokens, which could allow dangerous ICS attacks, including full-system takeover.
January 23, 2018 23 Jan'18
Intel Meltdown patches pulled with little explanation

Intel claims it has determined why the Spectre and Meltdown patches caused issues on some chips. The vendor is working on a fix and suggests users don't patch for now.
January 19, 2018 19 Jan'18
Okiru malware puts billions of connected devices at risk

News roundup: Okiru, a new Mirai variant, could put over 1.5 billion devices at risk of a botnet. Plus, G Suite Enterprise now comes with a security center, and more.
January 19, 2018 19 Jan'18
Trisis ICS malware was publicly available after attack

The Trisis ICS malware used in a cyberattack on an oil and gas company in Saudi Arabia in December has been publicly available for weeks after being copied by unknown actors.
January 18, 2018 18 Jan'18
The strange case of the 'HP backdoor' in Lenovo switches

Lenovo's discovery of an authentication bypass, literally titled "HP backdoor," within its networking switches brings unsettling implications for the IT industry.

News

Sponsored News