News

News

• March 01, 2019 01 Mar'19

  Coinhive shutdown imminent after troubled cryptomining past

  The Coinhive cryptominer is scheduled to be shut down following a troubled history and experts don't think the company gave the full story as to why the shutdown is happening.

• March 01, 2019 01 Mar'19

  Research sparks debate over password manager vulnerabilities

  Researchers found several popular password managers expose master passwords in system memory, but experts recommend consumers and enterprises should still use the products.

• February 28, 2019 28 Feb'19

  Cisco patches persistent Webex vulnerability for a third time

  After two previous attempts, Cisco has issued a third patch for a persistent flaw in its Webex platform, which allows privilege escalation attacks on systems running the software.

• February 27, 2019 27 Feb'19

  MarioNet attack exploits HTML5 to create botnets

  Researchers created a new browser-based attack, called MarioNet, that exploits an HTML5 API and can create botnets even after a browser tab is closed or a target navigates away.

• February 26, 2019 26 Feb'19

  Eclypsium: Bare-metal cloud servers vulnerable to firmware attacks

  Eclypsium found IBM SoftLayer cloud services are vulnerable to what it calls Cloudborne, which allows threat actors to make small, but potentially deadly firmware changes.

• February 26, 2019 26 Feb'19

  Android brings FIDO2 certification to 1 billion devices

  The FIDO Alliance announced Android has received FIDO2 certification, which will bring the ability to sign into websites and apps with biometrics, rather than passwords.

• February 26, 2019 26 Feb'19

  CERT/CC's Art Manion says CVSS scoring needs to be replaced

  Security expert Art Manion discusses what he calls major problems within the Common Vulnerability Scoring System and explains why CVSS needs to be replaced.

• February 25, 2019 25 Feb'19

  WinRAR bug found and patched after 19 years

  A WinRAR bug that affects every version of the app over the past 19 years was discovered and patched. But it's unclear if the millions of the app's users will get the needed fix.

• February 22, 2019 22 Feb'19

  Security automation on display in 2019 RSAC Innovation Sandbox

  Security automation will be a factor when most innovative startup is chosen at this year's RSAC Innovation Sandbox since almost all finalists use automation to improve security.

• February 22, 2019 22 Feb'19

  Supply chain cybersecurity is a hot topic for RSAC 2019

  Following years of AI climbing the hype wheel at RSA Conference, the topic is no longer one of the most prevalent as supply chain and infrastructure fears take focus at RSAC 2019.

• February 21, 2019 21 Feb'19

  CrowdStrike report says breakout time for threat actors is increasing

  CrowdStrike's annual global threat report highlights why speed is critical for cybersecurity defenders. Experts sound off on key findings, including the rise of 'big game hunting.'

• February 20, 2019 20 Feb'19

  ConnectWise plugin flaw exploited in ransomware attacks on MSPs

  GandCrab ransomware infected several managed service providers, thanks to an old a ConnectWise manage plugin vulnerability, but a new decryptor tool is offering relief to victims.

• February 20, 2019 20 Feb'19

  At RSAC 2019, speculative execution threats take a back seat

  The Meltdown and Spectre vulnerabilities loomed large last year, but RSAC 2019 will have little fodder on speculative execution threats and side channels attacks.

• February 19, 2019 19 Feb'19

  Palo Alto Networks to acquire SOAR vendor Demisto

  Palo Alto Networks announced its plan of acquiring SOAR vendor Demisto for $560 million to accelerate its Application Framework strategy and beef up security operations automation.

• February 15, 2019 15 Feb'19

  Google Play security improved by targeting repeat offenders

  Google this week attributed security improvements in Google Play to both automated processes and human reviewers. The improvements include stopping bad apps from being published.