News

News

• December 07, 2018 07 Dec'18

  Risk & Repeat: RSA Conference 2019 eyes diversity improvements

  This week's Risk & Repeat podcast looks at RSA Conference's diversity and inclusion initiatives and discusses what they mean for both the event and the infosec industry.

• December 06, 2018 06 Dec'18

  NRCC email breach confirmed eight months later

  A security company was brought in to investigate a National Republican Congressional Committee breach from April, but little is known about the NRCC email theft.

• December 06, 2018 06 Dec'18

  NSO Group's Pegasus spyware linked to Saudi journalist death

  Soon after the Pegasus spyware was linked to the death of a Mexican journalist, a new lawsuit alleged the NSO Group and its spyware were also linked to the death of a Saudi journalist.

• December 05, 2018 05 Dec'18

  Testing email security products: Results and analysis

  Kevin Tolly of the Tolly Group offers a look at how his company set out to test several email security products and the challenges it faced to come up with sound methodologies.

• December 05, 2018 05 Dec'18

  New VirusTotal hash causes drop in antivirus detection rates

  Questions were raised about how antivirus vendors use the VirusTotal database after a researcher highlighted a significant drop in malware detection rates following an upload of a new VirusTotal hash.

• November 30, 2018 30 Nov'18

  Are US hacker indictments more than Justice Theater?

  New hacker indictments and U.S.Treasury Department sanctions highlight the disconnect between government action and real world consequences for threat actors.

• November 30, 2018 30 Nov'18

  Mitre enters product testing with Mitre ATT&CK framework

  The first round of evaluations using the Mitre ATT&CK framework has gone public, putting on display how different endpoint products detect advanced threat activities.

• November 30, 2018 30 Nov'18

  RSA Conference launches diversity and inclusion initiative

  Following the criticism of the last conference, RSA Conference started a diversity and inclusion initiative that, among many other changes, eliminates all-male panels.

• November 30, 2018 30 Nov'18

  Marriott discloses Starwood data breach affecting 500 million guests

  Marriott International admitted to a Starwood data breach that began in 2014 and affects about 500 million customers. Experts are unsure about the GDPR implications.

• November 30, 2018 30 Nov'18

  Spectre v2 mitigation causes significant slowdown on Linux 4.20

  News roundup: A Spectre v2 mitigation causes significant performance slowdowns in Linux 4.20. Plus, Dell had to reset user passwords after a data breach, and more.

• November 30, 2018 30 Nov'18

  Risk & Repeat: DeepMasterPrints spells trouble for biometrics

  This week's Risk & Repeat podcast looks at the future of biometric authentication after researchers unveiled a new approach that uses neural networks to bypass fingerprint scanners.

• November 30, 2018 30 Nov'18

  Ponemon study shows data valuation discrepancies in enterprises

  A new study from the Ponemon Institute shows enterprises are underestimating the value of their data, including critical and confidential information assets.

• November 29, 2018 29 Nov'18

  SamSam ransomware actors charged, sanctioned by US government

  The FBI indicted two threat actors involved with the SamSam ransomware attacks while the US Treasury sanctioned two others for their role in exchanging Bitcoin earned from attacks.

• November 29, 2018 29 Nov'18

  Breaking down Dell's "potential cybersecurity incident" announcement

  Dell provided some information about a "potential cybersecurity incident" earlier this month, but it's unclear how the company and customers should be reacting.

• November 28, 2018 28 Nov'18

  Botnet takedown snares 3ve, Methbot ad fraud campaigns

  The Justice Department indicted eight individuals accused of running major ad fraud campaigns, including the 3ve botnet, which generated millions of dollars in fake ad revenue.