News

News

• June 01, 2018 01 Jun'18

  Yokogawa Stardom vulnerability leaves hardcoded creds in ICS controllers

  A Yokogawa Stardom vulnerability leaves industrial control systems in critical infrastructure around the world at risk because of hardcoded credentials in the software.

• June 01, 2018 01 Jun'18

  SS7 vulnerabilities enable breach of major cellular provider

  News roundup: A major cellular network may have been compromised by exploiting SS7 vulnerabilities, according to reports. Plus, Kaspersky's lawsuits have been dismissed, and more.

• June 01, 2018 01 Jun'18

  Federal cybersecurity report says nearly 75% of agencies at risk

  The 'Federal Cybersecurity Risk Determination Report and Action Plan' shows the majority of federal agencies are at risk, and DHS suggests a lack of leadership may be to blame.

• May 31, 2018 31 May'18

  New Walmart CISO discusses protecting the world's largest retailer

  Walmart CISO Jerry Geisler talks about the retail giant's evolving cloud strategy, vulnerability management and risks the company is focused on across its environments.

• May 31, 2018 31 May'18

  Risk & Repeat: Are ICS threats being overblown or ignored?

  In this week's Risk & Repeat podcast, SearchSecurity editors discuss dangers to critical infrastructure in the wake of a new report on the threat actors behind the Trisis malware.

• May 31, 2018 31 May'18

  Yahoo hacker sentenced to five years in prison for massive breach

  One of four Yahoo hackers was sentenced to five years in prison for his role in the massive 2014 breach, which included accessing millions of sensitive email accounts.

• May 31, 2018 31 May'18

  Dragos' Robert Lee discusses latest ICS threats, hacking back

  In part two of this interview from RSA Conference 2018, Dragos CEO Robert Lee discusses the latest threats to industrial control systems and how those threats can be exaggerated.

• May 30, 2018 30 May'18

  It's GDPR Day. Let the privacy regulation games begin!

  GDPR Day -- May 25, 2018 -- has passed and enforcement is now accepting complaints against companies violating the terms of the EU's new privacy regulation.

• May 30, 2018 30 May'18

  Feds issue new alert on North Korean hacking campaigns

  The U.S. government claims two notable malware campaigns are the work of North Korean nation-state hacking group Hidden Cobra, also known as the Lazarus Group.

• May 30, 2018 30 May'18

  Apple transparency report shows national security requests rising

  The latest semiannual Apple transparency report showed national security requests on the rise and one expert questioned whether Apple could do more to be open about requests.

• May 29, 2018 29 May'18

  Threat hunting technology is on the rise, so are threats

  Detection of advanced threats is the top challenge for 55% of security operations centers, according to a new survey, as more companies explore threat hunting programs.

• May 25, 2018 25 May'18

  Creators of Trisis malware have expanded their ICS attacks

  News roundup: Dragos researchers say the group behind the Trisis malware has expanded its ICS attacks. Plus, Roaming Mantis malware now targets iOS devices, and more.

• May 25, 2018 25 May'18

  Dragos' Robert Lee explains why ICS security isn't all doom and gloom

  Dragos' Robert Lee talks with SearchSecurity at RSA Conference 2018 about why there are reasons to be optimistic about the state of ICS security, despite growing threats.

• May 24, 2018 24 May'18

  VPNFilter malware infects 500,000 devices for massive Russian botnet

  New malware, dubbed 'VPNFilter' by Cisco Talos, infects 500,000 devices and triggers action from Justice Department, which seized and sinkholed the botnet's domain.

• May 24, 2018 24 May'18

  Risk & Repeat: Breaking down the Efail flaws

  In this week's Risk & Repeat podcast, SearchSecurity editors discuss the Efail vulnerabilities in PGP and S/Mime protocols, as well as the rocky disclosure process for the flaws.